CISA Adds Exploited XWiki, VMware Flaws to KEV Catalog

AI-suggested

European organizations should immediately verify if their XWiki and VMware deployments are affected by the vulnerabilities listed in the KEV catalog and Broadcom advisories. Applying vendor-provided patches or updates is the highest priority. Where patches are not yet available, implement compensating controls such as network segmentation, strict access controls, and enhanced monitoring for unusual activity related to these products. Employ intrusion detection and prevention systems tuned to detect exploitation attempts targeting CVE-2025-41244 and related flaws. Conduct thorough asset inventories to identify all instances of XWiki and VMware products. Educate IT and security teams about the indicators of compromise and ensure incident response plans include scenarios involving these vulnerabilities. Regularly review and update firewall and endpoint protection rules to block known exploit payloads. Engage with vendors for timely updates and threat intelligence sharing. Finally, consider restricting administrative access to these platforms to trusted personnel and enforcing multi-factor authentication to reduce exploitation risk.