Is CVE-2025-49113 in the CISA Known Exploited Vulnerabilities catalog?

CVE-2025-49113 is not currently listed in the CISA KEV catalog.

Vulnerability intelligence

CVE-2025-49113

A suspected China-aligned campaign chained an XSS flaw patched in August 2024 with an RCE patched in mid-2025 to compromise physics and engineering departments at U.S. and Canadian universities. The gap is not disclosure — it is deployment.

2025

What WebPulse reported · 1 analysis

China-Aligned Hackers Chained Two Roundcube Flaws Against University Webmail. Both Were Patched Over a Year Ago.

A suspected China-aligned campaign chained an XSS flaw patched in August 2024 with an RCE patched in mid-2025 to compromise physics and engineering departments

July 8, 2026

View CVE-2025-49113 on the NIST National Vulnerability Database →

Related vulnerabilities

CVE-2025-71338 CVE-2025-71336 CVE-2025-71327 CVE-2025-67644 CVE-2025-66032 CVE-2025-64755 CVE-2025-59828 CVE-2025-59532