StackRadar

CVE-2025-8941

High

Advisory

Published 13 Aug 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.003
19th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,460
of 17,787 indexed, latest versions
Container images
1,350
deployed by those charts
Fix available
1 of 2
affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 1,460 of 17,787 indexed charts deploy, on 1,350 images.

Affected packageAffected versionsFixed inImages
pamdeb1.5.2-6, 1.5.2-6+deb12u1, 1.5.2-6+deb12u2, 1.7.0-5+1 moreno fix listed1,286
pamrpm1.1.8-22.el7, 1.1.8-23.el7, 1.3.1-4.el8, 1.3.1-8.el8+6 more0:1.1.8-23.el7_9.2, 0:1.3.1-8.el8_2.2, 0:1.3.1-14.el8_4.2, 0:1.3.1-16.el8_6.3+3 more64
OSV records
DEBIAN-CVE-2025-8941RHSA-2025:15101RHSA-2025:15102RHSA-2025:15103RHSA-2025:15104RHSA-2025:15105RHSA-2025:15106RHSA-2025:15107

Charts affected

1,460 by stars
ChartLatestAffected imagesRadar Score
minifluxmt1905021.1.61 of 3See more

miniflux mt190502 1.1.6

1 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
pam@1.7.0-5
no fix listed

Open the chart page →

2,681
open-webuimt1905022.3.101 of 3See more

open-webui mt190502 2.3.10

1 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
pam@1.7.0-5
no fix listed

Open the chart page →

1,638
paperless-ngxmt1905027.6.143 of 4See more

paperless-ngx mt190502 7.6.14

3 of the 4 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
pam@1.7.0-5
no fix listed
library/redis:771da9275c5f3
pam@1.5.2-6+deb12u2
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
pam@1.7.0-5
no fix listed

Open the chart page →

11,860
umamimt1905028.1.41 of 3See more

umami mt190502 8.1.4

1 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
pam@1.7.0-5
no fix listed

Open the chart page →

4,030
vaultwardenmt1905027.3.42 of 3See more

vaultwarden mt190502 7.3.4

2 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
pam@1.7.0-5
no fix listed
vaultwarden/server:1.35.443498a94b22f
pam@1.7.0-5
no fix listed

Open the chart page →

4,701
vikunjamt1905027.1.21 of 3See more

vikunja mt190502 7.1.2

1 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
pam@1.7.0-5
no fix listed

Open the chart page →

2,980
backendmulti-chart-app0.1.01 of 1See more

backend multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,839
frontendmulti-chart-app0.1.01 of 1See more

frontend multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,839
my-multi-chart-appmulti-chart-app0.1.01 of 2See more

my-multi-chart-app multi-chart-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

3,823
mum-discord-botmum-discord-botVerified publisher0.3.71 of 1See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

13,711
devops-demomungari-development-charts1.0.41 of 4See more

devops-demo mungari-development-charts 1.0.4

1 of the 4 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
pam@1.7.0-5
no fix listed

Open the chart page →

8,946
my-helm-chartmy-helm-charts-2024Verified publisher0.1.01 of 1See more

my-helm-chart my-helm-charts-2024 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
shamimkuet/nginx:1.0.2b82902a76a04
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,383
nginx-chartmyk8scharts1.0.01 of 1See more

nginx-chart myk8scharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,839
nginx-appmy-nginx-app0.1.31 of 1See more

nginx-app my-nginx-app 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,839
influxdbmy-personal-influxdb20.1.01 of 1See more

influxdb my-personal-influxdb2 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

3,772
helloworldmysql2s3bk0.1.01 of 1See more

helloworld mysql2s3bk 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,839
mystoremystore-chart0.1.02 of 3See more

mystore mystore-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
hazegoodlife/haaze:veggiesite50f02d2d5d4d
pam@1.5.2-6+deb12u1
no fix listed
hazegoodlife/haaze:milksite8d4c63169e14
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

8,776
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
hecrom/myweatherangularclient:1.3.11bb0372939c19
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

17,411
my-nginxna-helm-chartsVerified publisher1.0.01 of 1See more

my-nginx na-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,839
dependency-tracknaj980.0.91 of 3See more

dependency-track naj98 0.0.9

1 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
dependencytrack/apiserver:latestf1da63ed610a
pam@1.7.0-5
no fix listed

Open the chart page →

2,445
akauntingnas-helm-chartsVerified publisher1.0.31 of 2See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
akaunting/akaunting:3.0.1552811b36ec3a
pam@1.5.2-6
no fix listed

Open the chart page →

12,839
incorencsaVerified publisher1.38.02 of 29See more

incore ncsa 1.38.0

2 of the 29 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
pam@1.5.2-6+deb12u1
no fix listed
bitnamilegacy/postgresql:16.4.03ba6e6f11388
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

15,408
smilencsaVerified publisher1.1.04 of 23See more

smile ncsa 1.1.0

4 of the 23 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
pam@1.5.2-6
no fix listed
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
pam@1.5.2-6
no fix listed
socialmediamacroscope/preprocessing:0.1.3ca863306314b
pam@1.5.2-6
no fix listed
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
pam@1.5.2-6
no fix listed

Open the chart page →

109,485
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

29,687
neosyncneosyncVerified publisher0.5.412 of 3See more

neosync neosync 0.5.41

2 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
pam@1.5.2-6+deb12u1
no fix listed
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

7,056
apineosync-apiVerified publisher0.5.411 of 1See more

api neosync-api 0.5.41

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

2,755
workerneosync-workerVerified publisher0.5.411 of 1See more

worker neosync-worker 0.5.41

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

2,732
core-keeper-dedicatednerkho-helm-charts0.1.11 of 1See more

core-keeper-dedicated nerkho-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
escaping/core-keeper-dedicated:latest87fa79255962
pam@1.7.0-5
no fix listed

Open the chart page →

3,804
neuralbank-stackneuralbank-stack0.1.01 of 4See more

neuralbank-stack neuralbank-stack 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:latest4210a3296e7c
pam@1.7.0-5
no fix listed

Open the chart page →

5,198
agent-controlnewrelic0.0.921 of 1See more

agent-control newrelic 0.0.92

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
pam@1.7.0-5
no fix listed

Open the chart page →

3,821
agent-control-bootstrapnewrelic1.8.161 of 1See more

agent-control-bootstrap newrelic 1.8.16

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
newrelic/newrelic-agent-control-cli:1.24.047520b65d6b2
pam@1.7.0-5
no fix listed

Open the chart page →

918
nginx-appnginx-app0.1.21 of 1See more

nginx-app nginx-app 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,839
nginx-samplenginx-sample0.5.01 of 1See more

nginx-sample nginx-sample 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:1.27.098f8ec75657d
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,731
nginx-sample-dependentnginx-sample-dependent0.2.01 of 1See more

nginx-sample-dependent nginx-sample-dependent 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:1.27.098f8ec75657d
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,731
nginx-examplengrok-ingress-helm0.3.01 of 2See more

nginx-example ngrok-ingress-helm 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

2,960
terraform-backendnimbolus0.3.21 of 2See more

terraform-backend nimbolus 0.3.2

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/redis:8.2.24521b581dbdd
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

2,408
redisnineinfra-charts0.7.51 of 1See more

redis nineinfra-charts 0.7.5

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/redis:7.2.3a7cee7c8178f
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,510
basenn-coVerified publisher0.1.01 of 1See more

base nn-co 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,839
node-appnode-app-lili1.0.01 of 1See more

node-app node-app-lili 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
laly9999/node-app:1dd0e503913e1
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

9,831
node-debug-dashboardnode-debug-dashboardVerified publisher0.3.21 of 1See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

6,861
app1node-web-app10.1.31 of 1See more

app1 node-web-app1 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
pam@1.7.0-5
no fix listed

Open the chart page →

1,839
app2node-web-app10.1.31 of 1See more

app2 node-web-app1 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
pam@1.7.0-5
no fix listed

Open the chart page →

1,839
nginx-chartnomadshk-nginx0.1.01 of 1See more

nginx-chart nomadshk-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,839
file-system-ms-helm-chartnotesprojectchart0.1.01 of 2See more

file-system-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
pam@1.7.0-5
no fix listed

Open the chart page →

5,887
keycloak-helm-chartnotesprojectchart0.1.01 of 2See more

keycloak-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
pam@1.7.0-5
no fix listed

Open the chart page →

1,638
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
pam@1.7.0-5
no fix listed

Open the chart page →

6,864
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
pam@1.5.2-6
no fix listed

Open the chart page →

13,331
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
pam@1.5.2-6
no fix listed

Open the chart page →

13,405
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
pam@1.5.2-6
no fix listed

Open the chart page →

13,387
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
pam@1.7.0-5
no fix listed

Open the chart page →

5,928

Container images carrying it

1,350 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/debian:bookworm6ebd97fa83de
pam@1.5.2-6+deb12u2
no fix listed
1
library/debian:12.12-slimd5d3f9c23164
pam@1.5.2-6+deb12u1
no fix listed
1
library/debian:latestf324c7ff5432
pam@1.7.0-5
no fix listed
1
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
pam@1.5.2-6+deb12u2
no fix listed
1
library/ghost:6.37.01ef2e532ca4d
pam@1.5.2-6+deb12u2
no fix listed
1
library/ghost:6.25.12654b1e90413
pam@1.5.2-6+deb12u2
no fix listed
1
library/ghost:6.41.129773d6be407
pam@1.5.2-6+deb12u2
no fix listed
1
library/ghost:5.79.083f7bf209844
pam@1.5.2-6+deb12u1
no fix listed
1
library/ghost:6.62.0a7a268bbfb7f
pam@1.5.2-6+deb12u2
no fix listed
1
library/golang:latest512690a56605
pam@1.7.0-5
no fix listed
1
library/haproxy:3.4.10f597665a2a6
pam@1.7.0-5
no fix listed
1
library/haproxy:3.1-bookworm49a0a0d6f0b8
pam@1.5.2-6+deb12u1
no fix listed
1
library/haproxy:2.8.288baa7d29a27a
pam@1.7.0-5
no fix listed
1
library/haproxy:2.9.6fc5748ff7c72
pam@1.5.2-6+deb12u1
no fix listed
1
library/httpd:2.4.631ae8051591a5
pam@1.5.2-6+deb12u1
no fix listed
1
library/influxdb:2.8571eb4514977
pam@1.5.2-6+deb12u2
no fix listed
1
library/influxdb:1.12.3-meta8812029260b5
pam@1.5.2-6+deb12u2
no fix listed
1
library/influxdb:1.12.3-datab0f9fc41ed79
pam@1.5.2-6+deb12u2
no fix listed
1
library/influxdb:latestf75e48af0598
pam@1.5.2-6+deb12u2
no fix listed
1
library/matomo:5.1.2-apache2415789e1602
pam@1.5.2-6+deb12u1
no fix listed
1
library/matomo:5.13.0-apache8e6bdd396496
pam@1.7.0-5
no fix listed
1
library/memcached:1.6.4226983a43c918
pam@1.7.0-5
no fix listed
1
library/memcached:1.6.409ae868852d0b
pam@1.7.0-5
no fix listed
1
library/memcached:1.6.40cc523a19da58
pam@1.7.0-5
no fix listed
1
library/memcached:1.6.45dc561d52bb8a
pam@1.7.0-5
no fix listed
1
library/memcached:1.6.42-trixiee2a8683c7fbb
pam@1.7.0-5
no fix listed
1
library/mysql:8.0-debian9382e4f6f7f0
pam@1.5.2-6+deb12u2
no fix listed
1
library/neo4j:2026.05.0-enterprise2caf944aa4a5
pam@1.7.0-5
no fix listed
1
library/neo4j:2026.02.25ab4ab0358cf
pam@1.7.0-5
no fix listed
1
library/neo4j:2026.05.06c162e2432f8
pam@1.7.0-5
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
pam@1.5.2-6+deb12u1
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
pam@1.7.0-5
no fix listed
1
library/nextcloud:34.0.4-apachede4ad9389386
pam@1.7.0-5
no fix listed
1
library/nginx:1.27.409369da6b103
pam@1.5.2-6+deb12u1
no fix listed
1
library/nginx:1.291881968aff6f
pam@1.7.0-5
no fix listed
1
library/nginx:1.276784fb0834aa
pam@1.5.2-6+deb12u1
no fix listed
1
library/nginx:1.25.167f9a4f10d14
pam@1.5.2-6
no fix listed
1
library/nginx:1.25.49ff236ed47fe
pam@1.5.2-6+deb12u1
no fix listed
1
library/nginx:1.27.3fb197595ebe7
pam@1.5.2-6+deb12u1
no fix listed
1
library/node:22-bookworm-slim83f487e0a634
pam@1.5.2-6+deb12u2
no fix listed
1
library/node:208f693eaa7e0a
pam@1.5.2-6+deb12u2
no fix listed
1
library/node:latestf5d1cc40abc1
pam@1.7.0-5
no fix listed
1
library/php:8.4-fpm59fa733c9af6
pam@1.7.0-5
no fix listed
1
library/postgres:18.0073e7c8b84e2
pam@1.7.0-5
no fix listed
1
library/postgres:17.4304ab8135187
pam@1.5.2-6+deb12u1
no fix listed
1
library/postgres:18.43a82e1f56c8f
pam@1.7.0-5
no fix listed
1
library/postgres:16.11468e1f126ca5
pam@1.7.0-5
no fix listed
1
library/postgres:16.6557fea37a744
pam@1.5.2-6+deb12u1
no fix listed
1
library/postgres:18.369e8582b781c
pam@1.7.0-5
no fix listed
1
library/postgres:15.186eb0add3b77c
pam@1.7.0-5
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.