CVE-2025-68645

Exploited in the Wild ✓ Confirmed 0-Day

Triaged: March 5, 2026 1 article

VulnLookup ↗ NVD ↗ MITRE ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24

56.07%

probability

This CVE has a 56.07% probability of being exploited in the next 30 days.

0% Top 98.1th percentile of all CVEs 100%

CVSS score unavailable

Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Attack Intelligence

CWE-664 · Improper Control of a Resource Through its Lifetime CWE-669 · Incorrect Resource Transfer Between Spheres CWE-706 · Use of Incorrectly-Resolved Name or Reference CWE-829 · Inclusion of Functionality from Untrusted Control Sphere CWE-98 · Improper Control of Filename

Exploits & PoC

chinaxploiter/CVE-2025-68645-PoC

Academic proof-of-concept demonstrating CVE-2025-68645 for authorized security research.

0xBlackash/CVE-2025-68645

CVE-2025-68645

CMEGh0stX47/CVE-2025-68645

PoC CVE-2025-68645 — CMEGh0stX47/CVE-2025-68645

3 repos — triés par ⭐ Rechercher sur GitHub ↗

CISA Updates KEV Catalog with Four Actively Exploited Software Vulnerabilities

TheHackerNews Jan 23, 2026

Signal Intelligence

Confidenceⓘ

85%

EPSS 56.07%

Mentions 1

Last Seen Jan 23, 2026

CNA Information

Analyst Note

CVE-2025-68645 was published 2025-12-22 and is documented as actively exploited in the wild per CISA KEV catalog listing reported by TheHackerNews. The recent publication date (same month as CISA KEV addition) combined with CISA's explicit 'actively exploited' designation strongly indicates zero-day exploitation timing, though the article excerpt is truncated and exact exploitation-to-patch timeline cannot be fully verified.

Threat Actors 5

Cobalt

apt_group Financial crime 🇷🇺 RU

APT 28

apt_group Information theft and espionage 🇷🇺 RU

TAG-28

apt_group Information theft and espionage 🇨🇳 CN

Roaming Tiger

apt_group Information theft and espionage 🇨🇳 CN

White Bear

apt_group Information theft and espionage 🇷🇺 RU

Triage Info

Decided atMar 05, 2026