News | CSURFACE Threat Sensor

CSURFACE · 2025-09-18 ·Highlight

Google Patches Actively Exploited Chrome Zero-Day CVE-2025-10585

Google has patched a critical zero-day vulnerability in Chrome, CVE-2025-10585, actively exploited in the wild.

CVE-2025-10585 kev severity:CRITICAL poc-released zero-day cisa-kev active-exploitation confirmed-exploited has-poc ssvc:act

CSURFACE · 2025-09-18 ·Highlight

Google Patches Actively Exploited Chrome Zero-Day CVE-2025-10585

Google patched a critical Chrome zero-day, CVE-2025-10585, actively exploited before disclosure.

CVE-2025-10585 confirmed-exploited has-poc severity:CRITICAL zero-day kev cisa-kev ssvc:act poc-released active-exploitation

CSURFACE · 2025-09-17 ·Highlight

Apple Patches Critical Zero-Day Exploited in Sophisticated Attacks

Apple has patched a critical zero-day vulnerability in iOS, iPadOS, and macOS, actively exploited in sophisticated attacks.

CVE-2025-43300 has-poc disclosed active-exploitation cisa-kev kev confirmed-exploited ssvc:act severity:CRITICAL poc-released zero-day

CSURFACE · 2025-09-14 ·Highlight

Critical Deserialization Flaw in DELMIA Apriso Actively Exploited

A critical deserialization vulnerability in DELMIA Apriso is actively exploited, prompting urgent mitigation.

CVE-2025-5086 rce cisa-kev severity:CRITICAL active-exploitation deserialization kev confirmed-exploited ssvc:attend

CSURFACE · 2025-09-14 ·Highlight

Samsung Patches Critical Zero-Day CVE-2025-21043 Exploited in the Wild

Samsung patched a critical zero-day vulnerability, CVE-2025-21043, affecting mobile devices, which was actively exploited in the wild.

CVE-2025-21043 kev confirmed-exploited ssvc:act severity:CRITICAL active-exploitation zero-day cisa-kev

CSURFACE · 2025-09-10 ·Highlight

Critical FreePBX Vulnerability Exploited in the Wild

A critical FreePBX vulnerability is actively exploited, allowing remote code execution and database manipulation.

CVE-2025-57819 active-exploitation cisa-kev kev has-exploit has-poc poc-released weaponized severity:CRITICAL ssvc:act rce confirmed-exploited

CSURFACE · 2025-09-04 ·Highlight

TP-Link Router Vulnerabilities CVE-2023-50224 and CVE-2025-9377 Actively Exploited

Two actively exploited vulnerabilities in TP-Link routers, CVE-2023-50224 and CVE-2025-9377, demand urgent attention.

CVE-2023-50224 CVE-2025-9377 confirmed-exploited severity:HIGH rce networking info-disclosure kev zero-day ssvc:attend severity:MEDIUM active-exploitation cisa-kev

CSURFACE · 2025-09-04 ·Highlight

Critical Sitecore Vulnerability CVE-2025-53690 Actively Exploited

A critical deserialization flaw in Sitecore XM and XP, CVE-2025-53690, is being actively exploited.

CVE-2025-53690 poc-released active-exploitation zero-day has-poc ssvc:attend severity:CRITICAL cisa-kev kev confirmed-exploited

CSURFACE · 2025-09-02 ·Highlight

WhatsApp Zero-Click Exploit CVE-2025-55177 Actively Targeting Apple Devices

A zero-click vulnerability in WhatsApp, CVE-2025-55177, is actively exploited on Apple devices, prompting urgent updates.

CVE-2025-55177 active-exploitation cisa-kev kev confirmed-exploited ssvc:attend severity:MEDIUM

CSURFACE · 2025-08-29 ·Highlight

Critical CrushFTP Vulnerability CVE-2025-54309 Actively Exploited in the Wild

CVE-2025-54309 in CrushFTP is being actively exploited, allowing remote admin access; patch immediately.

CVE-2025-54309 active-exploitation zero-day cisa-kev critical severity:CRITICAL poc-released kev confirmed-exploited has-poc ssvc:act

CSURFACE · 2025-08-29 ·Highlight

Critical CrushFTP Vulnerability CVE-2025-54309 Actively Exploited

A critical vulnerability in CrushFTP, CVE-2025-54309, is being actively exploited, allowing attackers to gain admin access.

CVE-2025-54309 kev has-poc ssvc:act severity:CRITICAL active-exploitation zero-day cisa-kev poc-released confirmed-exploited

CSURFACE · 2025-08-28 ·Highlight

Critical Zero-Day CVE-2025-7775 Exploited in Citrix NetScaler Devices

A critical zero-day vulnerability, CVE-2025-7775, affecting Citrix NetScaler devices, is being actively exploited, necessitating immediate patching.

CVE-2025-7775 active-exploitation rce confirmed-exploited kev has-poc ssvc:act severity:CRITICAL poc-released zero-day cisa-kev

CSURFACE · 2025-08-26 ·Highlight

Active Exploitation of Git Vulnerability CVE-2025-48384 Prompts Urgent Patching

A high-severity Git vulnerability, CVE-2025-48384, is actively exploited, urging immediate patching.

CVE-2025-48384 poc-released confirmed-exploited ssvc:attend severity:HIGH active-exploitation cisa-kev kev has-poc

CSURFACE · 2025-08-16 ·Highlight

Critical Command Injection Flaw in Fortinet FortiSIEM Exploited in the Wild

A critical command injection vulnerability in Fortinet FortiSIEM is being actively exploited, prompting urgent patching.

CVE-2025-25256 poc-released active-exploitation breach has-poc ssvc:attend severity:CRITICAL

CSURFACE · 2025-08-14 ·Highlight

Zero-Day Exploit Targets N-able N-central with Command Injection Vulnerability

A zero-day vulnerability in N-able N-central, CVE-2025-8876, is actively exploited, allowing OS command injection.

CVE-2025-8876 disclosed zero-day rce confirmed-exploited active-exploitation cisa-kev kev ssvc:attend severity:HIGH

CSURFACE · 2025-08-12 ·Highlight

Critical Citrix NetScaler Flaw CVE-2025-6543 Actively Exploited in the Wild

A critical vulnerability in Citrix NetScaler ADC and Gateway, CVE-2025-6543, is being actively exploited, prompting urgent patching.

CVE-2025-6543 severity:CRITICAL cisa-kev kev confirmed-exploited ssvc:act poc-released active-exploitation has-poc

CSURFACE · 2025-07-16 ·Highlight

Google Chrome Zero-Day CVE-2025-6558 Actively Exploited, Patch Released

Google Chrome users urged to update immediately as CVE-2025-6558 is actively exploited.

CVE-2025-6558 kev has-poc severity:HIGH active-exploitation patched zero-day ssvc:attend poc-released cisa-kev confirmed-exploited

CSURFACE · 2025-07-16 ·Highlight

Google Patches Actively Exploited Chrome Zero-Day CVE-2025-6554

Google has patched a critical zero-day vulnerability in Chrome, CVE-2025-6554, actively exploited in the wild.

CVE-2025-6554 poc-released zero-day kev confirmed-exploited ssvc:attend active-exploitation cisa-kev has-poc severity:HIGH

CSURFACE · 2025-07-11 ·Highlight

Critical CVE-2025-47812 Exploited in Wing FTP Server, Patch Urgently Needed

A critical vulnerability in Wing FTP Server, CVE-2025-47812, is being actively exploited, allowing attackers to execute arbitrary commands. Immediate patching is essential.

CVE-2025-47812 ssvc:act active-exploitation rce kev confirmed-exploited has-exploit severity:CRITICAL poc-released cisa-kev campaign has-poc

CSURFACE · 2025-07-02 ·Highlight

Google Patches Actively Exploited Chrome Zero-Day CVE-2025-6554

Google has patched a critical Chrome zero-day, CVE-2025-6554, actively exploited in the wild.

CVE-2025-6554 zero-day has-poc ssvc:attend severity:HIGH poc-released active-exploitation cisa-kev kev confirmed-exploited

CSURFACE · 2025-07-01 ·Highlight

Exploited Roundcube Webmail Flaw Enables Remote Code Execution

A critical Roundcube Webmail vulnerability, CVE-2025-49113, is being actively exploited, allowing remote code execution by authenticated users.

CVE-2025-49113 rce has-exploit has-poc ssvc:attend poc-released cisa-kev breach kev confirmed-exploited severity:HIGH active-exploitation

CSURFACE · 2025-07-01 ·Highlight

Exploited Roundcube Webmail Flaw CVE-2025-49113 Enables Remote Code Execution

CVE-2025-49113 in Roundcube Webmail is actively exploited, allowing remote code execution.

CVE-2025-49113 has-poc severity:HIGH rce cisa-kev kev has-exploit confirmed-exploited ssvc:attend poc-released weaponized active-exploitation

CSURFACE · 2025-07-01 ·Highlight

Google Chrome Zero-Day CVE-2025-6554 Actively Exploited in the Wild

CVE-2025-6554, a zero-day in Chrome's V8 engine, is actively exploited; users must update immediately.

CVE-2025-6554 has-poc severity:HIGH active-exploitation cisa-kev kev confirmed-exploited ssvc:attend poc-released zero-day

CSURFACE · 2025-06-13 ·Highlight

Zero-Day Exploit Targets Apple Devices with Graphite Spyware

A zero-day flaw in Apple devices, CVE-2025-43200, is exploited to deliver Graphite spyware.

CVE-2025-43200 active-exploitation ssvc:attend severity:MEDIUM disclosed zero-day cisa-kev kev confirmed-exploited

CSURFACE · 2025-06-10 ·Highlight

Critical Wazuh Vulnerability Exploited by Mirai Botnets

A critical Wazuh vulnerability is being exploited by Mirai botnets, enabling remote code execution.

CVE-2025-24016 active-exploitation deserialization has-exploit severity:CRITICAL poc-released rce cisa-kev kev confirmed-exploited has-poc ssvc:attend

CSURFACE · 2025-06-06 ·Highlight

Google Chrome Zero-Day CVE-2025-5419 Actively Exploited in the Wild

A zero-day vulnerability in Google Chrome, CVE-2025-5419, is being actively exploited, prompting urgent updates.

CVE-2025-5419 zero-day confirmed-exploited poc-released active-exploitation cisa-kev kev has-poc ssvc:attend severity:HIGH

CSURFACE · 2025-06-04 ·Highlight

Google Chrome Zero-Day CVE-2025-5419 Actively Exploited in the Wild

Google patched a critical Chrome zero-day, CVE-2025-5419, actively exploited in the wild.

CVE-2025-5419 poc-released cisa-kev ssvc:attend severity:HIGH active-exploitation zero-day kev confirmed-exploited has-poc

CSURFACE · 2025-06-04 ·Highlight

ConnectWise ScreenConnect Vulnerability Exploited in the Wild

A high-severity flaw in ConnectWise ScreenConnect is being actively exploited, urging immediate patching.

CVE-2025-3935 cisa-kev kev confirmed-exploited ssvc:attend severity:HIGH active-exploitation

CSURFACE · 2025-05-28 ·Highlight

Critical Craft CMS Flaw CVE-2025-32432 Actively Exploited for Cryptomining

CVE-2025-32432 in Craft CMS is being exploited for cryptomining, urging immediate patching.

CVE-2025-32432 has-poc poc-released active-exploitation zero-day rce has-exploit weaponized cisa-kev kev confirmed-exploited ssvc:act severity:CRITICAL