CVE-2025-20337

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 12, 2025

Last Seen

September 17, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Zero-Day Vulnerability in Cisco ISE Under Active Exploitation89.0

Cisco has disclosed a critical vulnerability (CVE-2026-76460) in its Identity Services Engine (ISE) that allows unauthenticated remote attackers to bypass authentication via a flaw in an API endpoint. This vulnerability has a CVSS score of 10.0 and is actively being exploited in the wild, prompting...

Advanced Threat Actor Exploits Cisco and Citrix Zero-Day Vulnerabilities80.0

An advanced persistent threat actor exploited zero-day vulnerabilities in Cisco Identity Service Engine and Citrix NetScaler products. The attacks utilized custom malware and were detected by Amazon's MadPot honeypot service before the vulnerabilities were publicly disclosed. Key vulnerabilities inc...

FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation79.5

A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of total control being seized by malicious actors. The flaw has been confirmed to be ex...

Critical Ivanti EPMM Vulnerabilities Under Active Exploitation72.8

Two critical vulnerabilities in Ivanti's Endpoint Manager Mobile (EPMM), CVE-2026-1281 and CVE-2026-1340, have been actively exploited in the wild, allowing unauthenticated remote code execution (RCE) with a CVSS score of 9.8. These vulnerabilities were disclosed on January 29, 2026, and have since...