CVE-2025-41239

✓ Confirmed 0-Day
Triaged: March 5, 2026 1 article
VulnLookup ↗ NVD ↗ MITRE ↗

EPSS Score

Source: FIRST.org · 2026-05-24
0.2%
probability
This CVE has a 0.2% probability of being exploited in the next 30 days.
0% Top 42.4th percentile of all CVEs 100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Attack Intelligence

Signal Intelligence

Confidenceⓘ
85%
EPSS 0.2%
Mentions 1
Last Seen Jul 17, 2025

CNA Information

Analyst Note

CVE-2025-41239 is explicitly named as one of four ESXi zero-day bugs exploited at Pwn2Own Berlin according to BleepingComputer. The article title directly confirms zero-day exploitation, and the CVE publication date (2025-07-15) aligns with the Pwn2Own event timing, indicating exploitation preceded or coincided with patch availability.

Threat Actors 2

Hacking Team
apt_group 🇮🇹 IT
The White Company
apt_group Information theft and espionage 🇨🇳 CN

Triage Info

Decided atMar 05, 2026