CISA adds four known exploited vulnerabilities to catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation:

CVE-2025-31125 Vite Vitejs Improper Access Control Vulnerability, CVE-2025-34026 Versa Concerto Improper Authentication Vulnerability, CVE-2025-54313 Prettier eslint-config-prettier Embedded Malicious Code Vulnerability, CVE-2025-68645 Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability.

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.

Return to Alerts