cve recordexploit reported

CVE-2026-25895

CVSS—

Severitynone

Weakness—

EPSS6.9%94.0th percentile

Exploited1 KEV source

patch window

Called exploited 190 days after disclosure.

Measured from the CVE publication date to the earliest of 1 KEV catalogue that list it.

The life of this vulnerability

CVE publishedFeb 9, 2026
First KEV listingAug 18, 20266mo
Last sightingSep 4, 202617d

Gaps are compressed to equal steps. The elapsed time is printed under each.

Which catalogues call it exploited

CISA KEVUS federaldoes not list it
EUVDENISA, European Uniondoes not list it
VulnCheck KEVcommercial researchlisted Aug 18, 2026
CIRCLaggregator, mirrors the abovedoes not list it

Sources1 of 3

Listings differ by—

This rests on a single catalogue. No second catalogue corroborates the claim that it is being exploited. CIRCL is an aggregator and is not counted.

Public exploitation evidence

reported exploitationSep 4, 2026api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-2
reported exploitationSep 3, 2026api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-2
reported exploitationSep 2, 2026api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-2
reported exploitationAug 31, 2026api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-2
reported exploitationAug 30, 2026api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-2
reported exploitationAug 28, 2026api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-2

11 public reports collected from VulnCheck and CIRCL, first on Aug 18, 2026. Each links to its original source. We have not verified them.

Description

References

← Back to the CVE Tracker

Our coverage of CVE-2026-25895

CVE-2026-19478Aug 24, 2026high

⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More

This week's cybersecurity reporting highlights several significant threats, including the emergence of AI-powered attacks against industrial control systems (ICS), active exploitation of a critical vulnerability in GitLab, and the discovery of trojanized npm packages distributing a sophisticated Linux backdoor. Further reports detailed a novel method for exploiting expired credit cards in…