U.S. CISA adds Prettier eslint-config-prettier, Vite Vitejs, Versa Concerto SD-WAN orchestration platform and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalog
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-31125 | Vite Dev Server Improper Access Control Exposes Protected Files (Actively Exploited) | 7.5 | 75% | KEVPoC ×2 | KEV |
| CVE-2025-34026 | Authentication Bypass in Versa Concerto SD-WAN Orchestration Platform (CVE-2025-34026) | 9.2 | 82% | KEVPoC | KEV |
| CVE-2025-54313 | Supply chain malware embedded in npm package eslint-config-prettier | 7.5 | 5% | KEVPoC ×2 | KEV |
| CVE-2025-68645 | PHP Remote File Inclusion in Synacor Zimbra Collaboration Suite (ZCS) | 8.8 | 49% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | server.host | t expose the Vite dev server to the network using --host or server.host . The issue is patched in versions 6.2.4, 6.1.3, 6.0.13, 5. |
From the original article
2 min read at securityaffairs.com
U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds Prettier eslint-config-prettier, Vite Vitejs, Versa Concerto SD-WAN orchestration platform, and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalog.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.