cve recordzero dayexploit reported

CVE-2025-49132

CVSS—

Severitynone

Weakness—

EPSS54.5%99.0th percentile

Exploited1 KEV source

patch window

Called exploited 1 days before disclosure.

Measured from the CVE publication date to the earliest of 1 KEV catalogue that list it.

The life of this vulnerability

CVE publishedJun 20, 2025
First KEV listingJun 19, 20251d
Last sightingSep 4, 20261.2y

Gaps are compressed to equal steps. The elapsed time is printed under each.

Which catalogues call it exploited

CISA KEVUS federaldoes not list it
EUVDENISA, European Uniondoes not list it
VulnCheck KEVcommercial researchlisted Jun 19, 2025
CIRCLaggregator, mirrors the abovedoes not list it

Sources1 of 3

Listings differ by—

This rests on a single catalogue. No second catalogue corroborates the claim that it is being exploited. CIRCL is an aggregator and is not counted.

Public exploitation evidence

reported exploitationSep 4, 2026api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-4
reported exploitationAug 30, 2026api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-4
reported exploitationAug 5, 2026api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-4
reported exploitationJul 30, 2026api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-4
reported exploitationJul 28, 2026api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-4
reported exploitationJul 25, 2026api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2025-4

21 public reports collected from VulnCheck and CIRCL, first on Jun 19, 2025. Each links to its original source. We have not verified them.

Description

References

← Back to the CVE Tracker

Our coverage of CVE-2025-49132

CVE-2026-46300Aug 14, 2026high

Metasploit Wrap Up: Lot of summer shells and fit http profiles

Metasploit has released a significant update, introducing thirteen new modules that address a variety of vulnerabilities, including several remote code execution (RCE) flaws. The update also brings enhancements to the framework's capabilities, such as support for HTTP malleable profiles and improved functionality for Windows on ARM architectures.