CISA Adds Apple, Craft CMS, and Laravel Livewire Flaws to KEV Catalog as Active Exploitation Expands

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added five security flaws affecting Apple products, Craft CMS, and Laravel Livewire to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.

The newly added vulnerabilities are listed below -

• CVE-2025-31277 (CVSS score: 8.8) - Apple Multiple Products Buffer Overflow Vulnerability
• CVE-2025-32432 (CVSS score: 10.0) - Craft CMS Code Injection Vulnerability
• CVE-2025-43510 (CVSS score: 7.8) - Apple Multiple Products Improper Locking Vulnerability
• CVE-2025-43520 (CVSS score: 8.8) - Apple Multiple Products Classic Buffer Overflow Vulnerability
• CVE-2025-54068 (CVSS score: 9.8) - Laravel Livewire Code Injection Vulnerability

Federal Civilian Executive Branch (FCEB) agencies have been directed to apply the necessary mitigations by April 3, 2026, as required under Binding Operational Directive (BOD) 22-01.

While KEV deadlines apply to federal agencies, the catalog serves as a strong warning to private-sector organizations as well, given that inclusion means the flaws are no longer merely theoretical and have already been weaponized by threat actors.