CVE-2025-61932

Exploited in the Wild ✓ Confirmed 0-Day
Triaged: March 5, 2026 3 articles

EPSS Score

Source: FIRST.org · 2026-05-24
1.96%
probability
This CVE has a 1.96% probability of being exploited in the next 30 days.
0% Top 83.7th percentile of all CVEs 100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Attack Intelligence

Signal Intelligence

Confidence
92%
EPSS 1.96%
Mentions 3
Last Seen Nov 01, 2025

CNA Information

Analyst Note

CVE-2025-61932 is a 2025 vulnerability explicitly named as a zero-day exploited by China-linked threat actors (Tick group) in active cyberattacks. CISA added it to the KEV catalog confirming active exploitation in the wild. The timing aligns with a recent CVE publication (October 2025) and explicit zero-day language in multiple authoritative sources (BleepingComputer headline, Tick attribution article).

Threat Actors 5

APT 28
apt_group Information theft and espionage 🇷🇺 RU
Tick
apt_group Information theft and espionage 🇨🇳 CN
Infy
apt_group Information theft and espionage 🇮🇷 IR
APT 22
apt_group Information theft and espionage 🇨🇳 CN
Mana Team
apt_group 🇨🇳 CN

Triage Info

Decided atMar 05, 2026