CVE-2025-22226

Exploited in the Wild ✓ Confirmed 0-Day
Triaged: March 5, 2026 7 articles
VulnLookup ↗ NVD ↗ MITRE ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24
4.23%
probability
This CVE has a 4.23% probability of being exploited in the next 30 days.
0% Top 88.9th percentile of all CVEs 100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Attack Intelligence

Signal Intelligence

Confidenceⓘ
85%
EPSS 4.23%
Mentions 7
Last Seen Jan 09, 2026

CNA Information

Analyst Note

CVE-2025-22226 meets zero-day criteria: published 2025-03-04 with exploitation in the wild documented since October 2024 (months before patch), explicitly named as 'zero-day' in multiple authoritative sources (BleepingComputer, TheHackerNews), and attributed to Chinese-linked threat actors. Exploitation clearly preceded patch availability.

Threat Actors 32

APT27
apt_group Information theft and espionage 🇨🇳 CN
Cobalt
apt_group Financial crime 🇷🇺 RU
APT 28
apt_group Information theft and espionage 🇷🇺 RU
Cron
apt_group 🇷🇺 RU
Hacking Team
apt_group 🇮🇹 IT
The Shadow Brokers
apt_group 🇷🇺 RU
Infy
apt_group Information theft and espionage 🇮🇷 IR
Volt Typhoon
apt_group Information theft and espionage 🇨🇳 CN
Group 27
apt_group Information theft and espionage 🇨🇳 CN
BackdoorDiplomacy
apt_group Information theft and espionage 🇨🇳 CN
Lucky Cat
apt_group Information theft and espionage 🇨🇳 CN
[Unnamed group]
apt_group 🇨🇳 CN
Dark Caracal
apt_group Information theft and espionage 🇱🇧 LB
APT 22
apt_group Information theft and espionage 🇨🇳 CN
Cyber Av3ngers
apt_group Sabotage and destruction 🇮🇷 IR
Moonstone Sleet
apt_group 🇰🇷 KR
APT 6
apt_group Information theft and espionage 🇨🇳 CN
Red October
apt_group 🇷🇺 RU
Soft Cell
apt_group Information theft and espionage 🇨🇳 CN
The White Company
apt_group Information theft and espionage 🇨🇳 CN
Test Panda
apt_group 🇨🇳 CN
Pat Bear
apt_group 🇸🇾 SY
Operation Red Signature
apt_group Information theft and espionage 🇨🇳 CN
Unnamed Actor
apt_group 🇨🇳 CN
Shadow Network
apt_group Information theft and espionage 🇨🇳 CN
Mana Team
apt_group 🇨🇳 CN
Poisonous Panda
apt_group Information theft and espionage 🇨🇳 CN
Liminal Panda
apt_group 🇨🇳 CN
Big Panda
apt_group 🇨🇳 CN
APT 5
apt_group Information theft and espionage 🇨🇳 CN
Earth Berberoka
apt_group Information theft and espionage 🇨🇳 CN
Electric Panda
apt_group 🇨🇳 CN

Triage Info

Decided atMar 05, 2026