CISA Adds One Known Exploited Vulnerability to Catalog
2026-03-27T23:24:09Z•80e868e173fba354c6aaed341e0950636599f64038ecb84c5656ff3b9bd95b2d
BOD 22-01CISACVEKEVKnown Exploited Vulnerabilitiesactive exploitationcode injectionremediationremote code executionvulnerability
What happened
CISA added multiple vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog after evidence of active exploitation. Affected products include F5 BIG‑IP (CVE-2025-53521, remote code execution), Aqua Security Trivy (CVE-2026-33634, embedded malicious code), Langflow (CVE-2026-33017, code injection), Apple multiple products (CVE-2025-31277 buffer overflow; CVE-2025-43510 improper locking; CVE-2025-43520 classic buffer overflow), Craft CMS (CVE-2025-32432 code injection), Laravel Livewire (CVE-2025-54068 code injection), Cisco Secure Firewall Management Center / Security Cloud Control(
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- 80e868e173fba354c6aaed341e0950636599f64038ecb84c5656ff3b9bd95b2d
- Enrichment time
- 2026-03-27T23:24:09Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.