CISA adds two known exploited vulnerabilities to catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation: CVE-2025-54236 Adobe Commerce and Magento Improper Input Validation Vulnerability, CVE-2025-59287 Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability.

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and poses significant risks to the federal enterprise.

Return to Alerts