Week 31, 2025
28 July to 3 August 2025. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.
- CVEs published
- 677
- Critical
- 96
- High
- 189
- Added to KEV
- 3
Critical 96High 189Medium 366Low 26Not scored 0All 677 in the list
Added to KEVAttackers use these now; patch them first
- CVE-2025-20337
Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
Cisco · Cisco Identity Services Engine Software
ExploitedCritical10.0 - CVE-2025-20281
Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
Cisco · Cisco Identity Services Engine Software
ExploitedCritical10.0 - CVE-2023-2533
PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF
PaperCut · PaperCut NG/MF
ExploitedHigh8.4
Most severe new CVEsBy CVSS score
- CVE-2013-10040
ClipBucket <= 2.6 ofc_upload_image.php Arbitrary File Upload RCE
ClipBucket LLC · ClipBucket
Critical10.0 - CVE-2014-125124
Pandora FMS <= 5.0RC1 Anyterm Unauthenticated Command Injection
Artica ST · Pandora FMS
Critical10.0 - CVE-2014-125121
Array Networks vAPV and vxAG Default Credential Privilege Escalation
Array Networks · vAPV
Critical10.0 - CVE-2014-125123
Kloxo < 6.1.12 Unauthenticated SQL Injection RCE
LXCenter · Kloxo
Critical10.0 - CVE-2025-54419
Node-SAML Contains SAML Signature Verification Vulnerability
node-saml · node-saml
Critical10.0 - CVE-2025-54381
BentoML is Vulnerable to an SSRF Attack Through File Upload Processing
bentoml · BentoML
Critical9.9 - CVE-2025-54426
Polkadot Frontier contains silent failure in Curve25519 arithmetic precompiles with malformed points
polkadot-evm · frontier
Critical9.9 - CVE-2025-50475
An OS command injection vulnerability exists in Russound MBX-PRE-D67F firmware version 3.1.6, allowing unauthenticated attackers to execute arbitrary commands…
Product not named
Critical9.8 - CVE-2025-5947
Service Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie
aonetheme · Service Finder Bookings
Critical9.8 - CVE-2025-50578
LinuxServer.io heimdall 2.6.3-ls307 contains a vulnerability in how it handles user-supplied HTTP headers, specifically `X-Forwarded-Host` and `Referer`. An…
Product not named
Critical9.8