CISA Adds Five Known Exploited Vulnerabilities to Catalog

CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

• CVE-2021-21311 Adminer Server-Side Request Forgery Vulnerability
• CVE-2025-20352 Cisco IOS and IOS XE Stack-based Buffer Overflow Vulnerability
• CVE-2025-10035 Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability
• CVE-2025-59689 Libraesva Email Security Gateway Command Injection Vulnerability
• This article has been indexed from All CISA Advisories