Exploited vulnerabilitiesBriefPublic record
Cisco ASA / FTD zero-days, ArcaneDoor (CVE-2025-20333 / -20362)
KEV: 25 Sep 2025. Emergency Directive ED 25-03.
- Disclosed
What happened
- KEV: 25 Sep 2025. Emergency Directive ED 25-03. ROM-level persistence on 5500-X devices.
Live scores
Live scores
CVE-2025-20333- EPSS
- 0.712
very likely to be attacked soon - VEDAS
- 0.982
strong exploit evidence - On CISA KEV
- Yes, since 2025-09-25
- Detection rule
- None yet
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.
Live scores
CVE-2025-20362- EPSS
- 0.871
very likely to be attacked soon - VEDAS
- 0.978
strong exploit evidence - On CISA KEV
- Yes, since 2025-09-25
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.
Sources
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.