CVE-2025-68645

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

January 26, 2026

Last Seen

January 30, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CISA Adds New Vulnerabilities to KEV Catalog29.9

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerabilities affect Vitejs, Prettier, Versa Concerto SD-WAN, and Synacor Zimbra Collaboration Suite, requiring federal agencies to address...

Zimbra Collaboration Suite Local File Inclusion Vulnerability Exploited25.3

A Local File Inclusion (LFI) vulnerability (CVE-2025-68645) has been identified in the Zimbra Collaboration Suite Webmail Classic UI, allowing unauthenticated attackers to exploit user-supplied request parameters. Successful exploitation may lead to the leakage of sensitive files and further comprom...