CISA's list that day
2 June 2025
On CISA added 5 vulnerabilities to its list of exploited vulnerabilities, in ASUS Routers, ASUS RT-AX55 Routers, Craft CMS and 1 other product. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2024-56145Code Injection | Craft CMS Craft CMS | Patch this weekMetasploit module; EPSS 0.97 | 0.97 | ||
| CVE-2021-32030Improper Authentication | ASUS Routers | Patch this weekEPSS 0.99 | 0.99 | ||
| CVE-2023-39780OS Command Injection | ASUS RT-AX55 Routers | Patch soon | 0.40 | ||
| CVE-2025-3935Improper Authentication | ConnectWise ScreenConnect | Patch soon | 0.04 | ||
| CVE-2025-35939External Control of Assumed-Immutable Web Parameter | Craft CMS Craft CMS | Patch soon | 0.01 |