Exploit / PoCcriticalExploited in the wild

U.S. CISA adds Cisco, SonicWall, and ASUS flaws to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsDec 18, 2025 · 10:18 UTC (Dec 18, 2025)3 min read1 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-20393 CVE-2025-40602 CVE-2025-59374 CVE-2025-23006

Tags: cve-2025-20393 cve-2025-40602 cve-2025-59374 cve-2025-23006 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-20393	Improper Input Validation in Cisco Secure Email and Web Appliances Allows Root Commands	10.0	32%	KEV	Dec 17, 2025 KEV Dec 17, 2025
CVE-2025-23006	Unauthenticated Deserialization RCE in SonicWall SMA1000 Appliances	9.8	23%	KEVRansomware	Jan 23, 2025 KEV Jan 24, 2025
CVE-2025-40602	Missing Authorization Flaw in SonicWall SMA1000 Appliance Management Console	6.6	3%	KEV	Dec 18, 2025 KEV Dec 17, 2025
CVE-2025-59374	Supply Chain-Embedded Malicious Code in ASUS Live Update Utility	9.3	1%	KEV	Dec 17, 2025 KEV Dec 17, 2025

From the original article

3 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco, SonicWall, and ASUS flaws to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.