CVE-2025-0994

Exploited in the Wild ✓ Confirmed 0-Day
Triaged: March 5, 2026 3 articles
VulnLookup ↗ NVD ↗ MITRE ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24
75.22%
probability
This CVE has a 75.22% probability of being exploited in the next 30 days.
0% Top 98.9th percentile of all CVEs 100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Attack Intelligence

Signal Intelligence

Confidenceⓘ
85%
EPSS 75.22%
Mentions 3
Last Seen May 22, 2025

CNA Information

Analyst Note

CVE-2025-0994 is a February 2025 vulnerability with active exploitation by Chinese threat actors against US local governments reported by BleepingComputer. The article explicitly labels it as a 'zero-day', and the timing (CVE published Feb 6, 2025; exploitation actively occurring) indicates real-world attacks preceded or coincided with patch availability. High CVSS score and authenticated RCE capability support severity claims.

Threat Actors 22

Lazarus Group
apt_group Information theft and espionage 🇰🇵 KP
Mustang Panda
apt_group Information theft and espionage 🇨🇳 CN
Cobalt
apt_group Financial crime 🇷🇺 RU
APT 28
apt_group Information theft and espionage 🇷🇺 RU
CHRYSENE
apt_group Information theft and espionage 🇮🇷 IR
Vicious Panda
apt_group Information theft and espionage 🇨🇳 CN
Hacking Team
apt_group 🇮🇹 IT
Cleaver
apt_group Information theft and espionage 🇮🇷 IR
Volt Typhoon
apt_group Information theft and espionage 🇨🇳 CN
YoroTrooper
apt_group Information theft and espionage 🇰🇿 KZ
[Unnamed group]
apt_group 🇨🇳 CN
Silent Lynx
apt_group Information theft and espionage 🇰🇿 KZ
APT 22
apt_group Information theft and espionage 🇨🇳 CN
APT 6
apt_group Information theft and espionage 🇨🇳 CN
Pat Bear
apt_group 🇸🇾 SY
Operation Digital Eye
apt_group Information theft and espionage 🇨🇳 CN
Unnamed Actor
apt_group 🇨🇳 CN
Shadow Network
apt_group Information theft and espionage 🇨🇳 CN
Mana Team
apt_group 🇨🇳 CN
Operation Shadow Force
apt_group 🇨🇳 CN
Natohub
apt_group 🇪🇸 ES
APT 5
apt_group Information theft and espionage 🇨🇳 CN

Triage Info

Decided atMar 05, 2026