CISA's list that day
22 January 2026
On CISA added 4 vulnerabilities to its list of exploited vulnerabilities, in Vitejs, Versa Concerto, Prettier eslint-config-prettier and 1 other product. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2025-31125Improper Access Control | Vite Vitejs | Patch this weekEPSS 0.65 | 0.65 | ||
| CVE-2025-34026Improper Authentication | Versa Concerto | Patch this weekEPSS 0.82 | 0.82 | ||
| CVE-2025-68645PHP Remote File Inclusion | Synacor Zimbra Collaboration Suite (ZCS) | Patch soon | 0.49 | ||
| CVE-2025-54313Embedded Malicious Code | Prettier eslint-config-prettier | Patch soon | 0.05 |