CVE-2025-31125

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

January 26, 2026

Last Seen

September 15, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Mass Scanning Campaign Targets Exposed Vite Servers for Cloud Credentials72.9

In August 2026, a mass-scanning campaign targeted internet-exposed Vite development servers to steal sensitive cloud credentials and configuration files from AWS and Azure. The attackers exploited CVE-2026-39364, a high-severity vulnerability allowing unauthenticated access to restricted files via m...

CISA Adds New Vulnerabilities to KEV Catalog29.9

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerabilities affect Vitejs, Prettier, Versa Concerto SD-WAN, and Synacor Zimbra Collaboration Suite, requiring federal agencies to address...