{"vulnerability": "CVE-2025-62593", "sightings": [{"uuid": "88d43999-8c0d-4c3d-833c-73c08a5bf358", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-62593", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/115618727470423566", "content": "", "creation_timestamp": "2025-11-27T00:02:56.117847Z"}, {"uuid": "a59728d1-9a6d-48d0-a89d-db9a11f352d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-62593", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m6l2y4nwdo2l", "content": "", "creation_timestamp": "2025-11-27T00:02:57.550922Z"}, {"uuid": "8c953191-c96c-4c82-8f45-4bacc348dd13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m6l7ibj5xh2q", "content": "", "creation_timestamp": "2025-11-27T01:23:33.524631Z"}, {"uuid": "6d92f1c7-80b0-427f-b5e0-90c026e1d3d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m6leatu3rv27", "content": "", "creation_timestamp": "2025-11-27T02:48:53.558172Z"}, {"uuid": "5e1f8d0d-dfe0-4ba4-9cc9-9ac09937baed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mgvcd42ypp23", "content": "", "creation_timestamp": "2026-03-12T21:02:40.901501Z"}, {"uuid": "384303ab-f67e-4f84-9e7a-500c39d61344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "published-proof-of-concept", "source": "Telegram/TSjyBUzWxGh2Ub0opXnUbz0rei4a_2NgG-FHxClbelKKRkQ", "content": "", "creation_timestamp": "2025-11-27T15:00:08.000000Z"}, {"uuid": "505834d1-ae5f-477b-bd82-e8b83206286b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/60929", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-62593\nURL\uff1ahttps://github.com/B1ack4sh/Blackash-CVE-2025-62593\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-27T09:56:49.000000Z"}, {"uuid": "694e45f5-e4cd-4f90-9dfb-e0a21721a695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-62593", "type": "published-proof-of-concept", "source": "https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v", "content": "", "creation_timestamp": "2025-11-26T17:19:39.000000Z"}, {"uuid": "f5a60dc2-4892-4b1a-af47-2caf17b91559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mtejt4lf3a2x", "content": "\ud83d\udea8 C-SUITE ALERT: CISA has flagged CVE-2025-62593 (Ray-Project) for active exploitation. This critical RCE flaw requires immediate executive oversight. Read our board-ready risk assessment and compliance framework to secure your enterprise. Command the wire. \ud83d\udc47 Link\u2026", "creation_timestamp": "2026-08-18T15:29:01.590517Z"}, {"uuid": "6858319a-d3bb-43a8-8dc1-ec0a336955d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mteknnaqjm2a", "content": "CISA has added a critical vulnerability, CVE-2025-62593 (CVSS score: 9.4), affecting the Ray framework to its Known Exploited Vulnerabilities catalog due to active exploitation. This flaw allows remote code execution via DNS rebinding attacks in browsers like Firefox and Safari.", "creation_timestamp": "2026-08-18T15:43:52.108801Z"}, {"uuid": "8ce690dd-68dd-45b9-b21f-5ea8d420bb50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mth4ox4dpw2n", "content": "Ray CVE-2025-62593:\u30d6\u30e9\u30a6\u30b6\u7d4c\u7531\u306eDNS\u30ea\u30d0\u30a4\u30f3\u30c7\u30a3\u30f3\u30b0\u306b\u3088\u308b\u6df1\u523b\u306a\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\n\n\u30a8\u30b0\u30bc\u30af\u30c6\u30a3\u30d6\u30b5\u30de\u30ea\u30fc CVE-2025-62593\u306f\u3001Python\u6a5f\u68b0\u5b66\u7fd2\u30ef\u30fc\u30af\u30ed\u30fc\u30c9\u3067\u5e83\u304f\u4f7f\u308f\u308c\u3066\u3044\u308b\u5206\u6563\u30b3\u30f3\u30d4\u30e5\u30fc\u30c6\u30a3\u30f3\u30b0\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u300cRay\u300d\u306b\u5b58\u5728\u3059\u308b\u6df1\u523b\u306a\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u3067\u3059\u3002 \u3053\u306e\u653b\u6483\u306fDNS\u30ea\u30d0\u30a4\u30f3\u30c7\u30a3\u30f3\u30b0\u3068\u3001User-Agent\u306b\u57fa...", "creation_timestamp": "2026-08-19T16:12:01.352861Z"}, {"uuid": "5266b220-6592-4f7b-b420-973c867e5939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mtbvd7uhz42p", "content": "\ud83d\uded1 CVE-2025-62593\nRay-Project Ray\nCVSS 9.4 / EPSS 0% / KEV: No\nTL;DR: Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a deve\u2026\nhttps://cvesentinel.com/report/CVE-2025-62593?utm_source=bluesky&amp;utm_medium=social&amp;utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-17T14:16:53.261667Z"}, {"uuid": "c46bc1f2-b313-4960-9d72-6b904a26622c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mtbx6574qn24", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2025-62593: Ray-Project Ray Code Injection Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2025-62593", "creation_timestamp": "2026-08-17T14:49:50.470312Z"}, {"uuid": "e2536f21-19c0-408d-a369-ab04ac8bf6c5", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dbcc7200-bedc-43a5-a884-5faab5df0c56", "content": "", "creation_timestamp": "2026-08-17T15:00:03.089142Z"}, {"uuid": "ff08e26b-9e8c-410a-b1fa-3a3ff829cce2", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a2123a01-1583-46af-afdd-0f872cd4307d", "content": "", "creation_timestamp": "2026-08-17T15:00:23.366622Z"}, {"uuid": "b11680d9-0e70-45de-ac31-59f7064afbaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/theaiguy.bsky.social/post/3mtby6a4pqc2i", "content": "CISA added the Ray RCE (CVE-2025-62593) to KEV, so it is being exploited. A dev running Ray locally visits the wrong page in Firefox or Safari, DNS rebinding does the rest, and code runs on their laptop. Upgrade to Ray 2.52.0. github.com/ray-project/r...", "creation_timestamp": "2026-08-17T15:07:47.198112Z"}, {"uuid": "ebc83a68-a1e9-4d4c-a6d2-3b05bb1cee0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mtbz7gnbbp2m", "content": "\ud83d\udd34 EXPLOITED\n\nRay, the AI compute framework, has a critical flaw (CVE-2025-62593): a malicious web page can reach a developer's local Ray dashboard and run code, no login needed.\n\nCISA now lists it as exploited.\n\nFix: update to Ray 2.52.0 and enable auth.", "creation_timestamp": "2026-08-17T15:26:21.712390Z"}, {"uuid": "cc744cf5-8b26-4b52-866f-3ada95fbb53e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117111549711737973", "content": "CISA has added one known vulnerability to the KEV catalogue.\n-  CVE-2025-62593: Ray-Project Ray Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-62593 #CISA #infosec #vulnerability", "creation_timestamp": "2026-08-17T15:27:14.397969Z"}, {"uuid": "4c32aa0a-bb1e-4cd2-85be-3a8ac8faf7ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtbzqqfow72w", "content": "\ud83d\udc1b VULNERABILITIES CVE-2025-62593: Ray-Project Ray Code Injection Vulnerability \u2014 Ray-Project Ray \u2014 CISA Known Exploited Vulnerabilities\nhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?search=CVE-2025-62593 #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-08-17T15:36:01.862891Z"}, {"uuid": "c33fd655-418e-4aaa-b63b-ef11841e572b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mtc3pyn2nh23", "content": "~Cisa~\nCISA added CVE-2025-62593, a Ray-Project Ray code injection flaw, to its KEV catalog due to active exploitation.\n-\nIOCs: CVE-2025-62593\n-\n#CVE-2025-62593 #Ray #ThreatIntel", "creation_timestamp": "2026-08-17T16:11:24.176243Z"}, {"uuid": "eb54b409-aeb0-41b8-b60b-997b9f02e50b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mtc3qo5y6u2c", "content": "CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2025-62593 Ray-Project Ray Code Injection Vulne...\n\n\ud83d\udd17 https://www.cisa.gov/news-events/alerts/2026/08/17/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-08-17T16:11:46.865693Z"}, {"uuid": "13d7a80e-eda0-45a1-a0c7-95a7a12d605a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://www.cisa.gov/news-events/alerts/2026/08/17/cisa-adds-one-known-exploited-vulnerability-catalog", "content": "", "creation_timestamp": "2026-08-17T16:15:03.082678Z"}, {"uuid": "00ff8814-9cfd-484b-a659-920e15cc3855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtc4hsi67a26", "content": "CISA confirms CVE-2025-62593, a Ray code injection RCE, is exploited in the wild. A public PoC targets Firefox and Safari.\n\n#CVE202562593 #Ray #RemoteCodeExecution #DNSRebinding #KEV #ExploitedInTheWild", "creation_timestamp": "2026-08-17T16:24:43.745171Z"}, {"uuid": "69c618cf-4835-4a06-9f4e-dea3834b67d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3mtc6hes6dt2f", "content": "\ud83d\udea8 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0818)\n\n\u26a0\ufe0f CVE-2025-62593 - Ray-Project Ray Code Injection Vulnerability\n\n\n#ZEN #SecDB #InfoSec #CISA_KEV", "creation_timestamp": "2026-08-17T17:00:16.211420Z"}, {"uuid": "830150b3-e853-425c-9875-eb845cd6c365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mtc7p4j2jf2p", "content": "Same story, different day, with CISA dutifully cataloguing CVE-2025-62593 after active exploitation of the Ray distributed computing framework was spotted in the wild. Federal civilian agencies are now burdened under Binding Operational Directive 26-04 with remediating this criti...\n\nRead full story", "creation_timestamp": "2026-08-17T17:22:29.753709Z"}, {"uuid": "6b8731e7-75b5-4fcd-8b90-25fe8c9d8ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mtccxqgsrf23", "content": "\ud83d\udea8 NEW CISA KEV: CVE-2025-62593 - Ray. Active RCE weaponization via DNS rebinding targeting developers on Firefox/Safari. Vendor patch 2.52.0 is mandatory. Get the full T-Suite brief &amp; SOC detection queries to secure your Precinct Hybrid architecture. Command the wire. Link below\u2026", "creation_timestamp": "2026-08-17T18:21:01.260668Z"}, {"uuid": "cd6b3561-d435-4d95-aab9-d0aef3cca3aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3mtcf5ussbl24", "content": "\ud83d\udea8 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0817)\n\n\u26a0\ufe0f CVE-2025-62593 - Ray-Project Ray Code Injection Vulnerability\n\n\n#ZEN #SecDB #InfoSec #CISA_KEV", "creation_timestamp": "2026-08-17T19:00:13.663721Z"}, {"uuid": "e82eb376-954e-456c-94ad-43dcbd70525e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://infosec.exchange/ap/users/116769913619325742/statuses/117111546417573620", "content": "\ud83d\udd34 EXPLOITED\nRay, the AI compute framework, has a critical flaw (CVE-2025-62593): a malicious web page can reach a developer's local Ray dashboard and run code, no login needed.\nCISA now lists it as exploited.\nFix: update to Ray 2.52.0 and enable auth.\nhttps://suriq.io/blog/ray-dashboard-dns-rebinding-rce-kev\n#CVE #CISAKEV #infosec #cybersecurity", "creation_timestamp": "2026-08-17T19:29:46.097297Z"}, {"uuid": "6259fb97-3ea2-4c26-b9f2-9d57d895ec0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://infosec.exchange/users/secdb/statuses/117111915301325679", "content": "\ud83d\udea8 [CISA-2026:0818] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0818)\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.\n\u26a0\ufe0f CVE-2025-62593 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-62593)- Name: Ray-Project Ray Code Injection Vulnerability- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&amp;#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: Ray-Project- Product: Ray- Notes: https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v ; https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-62593\n#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260818 #cisa20260818 #cve_2025_62593 #cve202562593", "creation_timestamp": "2026-08-17T19:30:13.795067Z"}, {"uuid": "6140bb1b-c5f7-4033-ba6d-a1c9ecce4fce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mtfi2p3nte2t", "content": "CISA adds CVE-2025-62593, a code injection vulnerability in Ray-Project Ray that permits remote code execution, to the Known Exploited Vulnerabilities catalog because it is under active exploitation.", "creation_timestamp": "2026-08-19T00:30:08.560537Z"}, {"uuid": "18ccf14f-4d4a-4943-8045-7a3393439eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtcrp67nv322", "content": "CVE-2025-62593 is trending. Hype score 7, currently #9 on cvemon.\n\nRay is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2025-62593", "creation_timestamp": "2026-08-17T22:44:38.995085Z"}, {"uuid": "55948b24-325e-4a51-abe2-8b149973a665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtfphlrqnl22", "content": "Top 3 CVE for last 7 days:\nCVE-2026-59310: 43 interactions\nCVE-2026-68820: 31 interactions\nCVE-2026-65400: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-19478: 6 interactions\nCVE-2026-43499: 6 interactions\nCVE-2025-62593: 5 interactions\n", "creation_timestamp": "2026-08-19T02:42:36.613219Z"}, {"uuid": "54e62fdb-dccd-41f6-beb5-244871c4f41f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtd6tqh63a2z", "content": "Top 3 CVE for last 7 days:\nCVE-2026-68820: 41 interactions\nCVE-2026-59310: 38 interactions\nCVE-2026-65400: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-65400: 9 interactions\nCVE-2025-62593: 8 interactions\nCVE-2026-69414: 8 interactions\n", "creation_timestamp": "2026-08-18T02:39:51.098184Z"}, {"uuid": "f31db38e-a3ab-4738-9088-9148c600a9f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtd6u5anqu2l", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30921\u4ef6\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds One Known Exploited Vulnerability to Catalog  #CISA (Aug 17)\n\nCVE-2025-62593 Ray-Project Ray \u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-08-18T02:40:04.269836Z"}, {"uuid": "ec5a99e9-8214-4ee7-b384-c961b4c7951b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mtdlqkzops2z", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2025-62593: \u26a0\ufe0f CVE-2025-62593: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.4%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2025-62593-ray-is-an-ai-compute-engine", "creation_timestamp": "2026-08-18T06:30:43.330905Z"}, {"uuid": "dfe191f7-2cdc-4aae-a2f2-a72bfb3d9710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mtdqa5bgle2d", "content": "CISA warns of active exploitation of Ray's CVE-2025-62593; update to version 2.52.0 immediately. #Cybersecurity #Ray #CVE202562593 #RemoteCodeExecution #DNSRebinding #CISA #SecurityUpdate https://thedailytechfeed.com/cisa-warns-of-active-exploitation-of-critical-ray-vulnerability/", "creation_timestamp": "2026-08-18T07:51:01.555062Z"}, {"uuid": "ffe7ebef-46e2-40c0-aeaa-7ce6bf129680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mtdqsmtpug2j", "content": "CISA\u3001Ray\u8106\u5f31\u6027CVE-2025-62593\u3092\u8b66\u544a \u30d6\u30e9\u30a6\u30b6\u30d9\u30fc\u30b9RCE\u53ef\u80fd\n\nCISA \u304c\u7a4d\u6975\u7684\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b Ray \u306e\u8106\u5f31\u6027 CVE-2025-62593 \u3092 KEV \u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3002DNS rebinding \u653b\u6483\u306b\u3088\u308a\u3001\u958b\u767a\u8005\u30b7\u30b9\u30c6\u30e0\u4e0a\u3067\u30d6\u30e9\u30a6\u30b6\u30d9\u30fc\u30b9\u306e RCE \u304c\u5b9f\u884c\u53ef\u80fd\u3002\u958b\u767a\u74b0\u5883\u3092\u5229\u7528\u3059\u308b\u30e6\u30fc\u30b6\u30fc\u306f\u65e9\u6025\u306a\u5bfe\u5fdc\u304c\u5fc5\u8981\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-08-18T08:01:21.724245Z"}, {"uuid": "3876a262-4a74-41f0-92c5-8d26583fd951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtdrp5bm5j2k", "content": "\ud83e\udd16 CVE-2025-62593: CISA adds the Ray framework flaw to KEV \u2014 actively exploited, browser-based RCE. Ray powers many AI/ML workloads; patch exposed clusters now.\nhttps://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html", "creation_timestamp": "2026-08-18T08:17:18.102464Z"}, {"uuid": "35fbbc38-0a5d-422f-9366-18345ca6ef28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-62593", "type": "seen", "source": "https://gist.github.com/cyberupdates365/ac3356da990dc68369858126167ed1d2", "content": "# CISA Flags Ray AI Vulnerability CVE-2025-62593 for Active Exploitation\n\nThe critical ray ai vulnerability cve-2025-62593 has been added to the CISA KEV catalog. Learn how DNS rebinding allows RCE and how to patch your Ray clusters.\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially added the critical ray ai vulnerability cve-2025-62593 to its Known Exploited Vulnerabilities (KEV) catalog. This inclusion signals that threat actors are actively weaponizing the flaw in the wild, prompting an urgent mandate for Federal Civilian Executive Branch (FCEB) agencies to apply patches by August 20, 2026.\n\nThe vulnerability, rated with a critical CVSS score of 9.4, allows attackers to achieve Remote Code Execution (RCE) via web browsers such as Mozilla Firefox and Apple Safari through a sophisticated DNS rebinding attack.\n\n\ud83d\udd17 **[Read the Full Technical Breakdown and Remediation Steps on CyberUpdates365](https://cyberupdates365.com/ray-ai-vulnerability-cve-2025-62593/)**", "creation_timestamp": "2026-08-18T09:46:56.525961Z"}, {"uuid": "f64247fc-7ef1-4902-b81a-b76db6292a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/cyberupdates365.bsky.social/post/3mtdxdj6uls2b", "content": "Are your AI models secure? \ud83d\uded1 A critical vulnerability (CVE-2025-62593) in the Ray framework allows attackers to completely hijack machine learning clusters. Check your exposure and apply the mitigations now:\ncyberupdates365.com/ray-ai-vulne...\n#CyberSecurity #MLOps #AI #news #techupdate", "creation_timestamp": "2026-08-18T09:58:14.525772Z"}, {"uuid": "57aa46ae-d4ca-43b8-95d5-f337c98bd8cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/stridingtech.bsky.social/post/3mtgf6a7uee2w", "content": "Heads up, sysadmins! CISA just rushed Ray RCE flaw CVE-2025-62593 into the KEV catalog following active exploitation reports. Time to patch immediately. \ud83d\udea8\ud83d\udee1\ufe0f\n\n#CyberSecurity #TechNews #Infosec \nhttps://stridingtech.com/archives/6096", "creation_timestamp": "2026-08-19T09:11:04.784923Z"}, {"uuid": "3077dc86-016c-4da4-b553-2564b0d54cb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "Telegram/p4lssD2r3oSedXIz02RqCBsvQICDpdDZh6inSefTC1cUqJE", "content": "", "creation_timestamp": "2026-08-20T03:00:05.472063Z"}, {"uuid": "4548441a-df1f-4968-8070-79bbeb23b451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mte2wox45w2u", "content": "CISA added CVE-2025-62593 in Ray to KEV, requiring rapid patching because the flaw enables remote code execution via web access and is actively exploited.\n", "creation_timestamp": "2026-08-18T11:02:35.615997Z"}, {"uuid": "071d3df4-55c9-4eac-a2c3-a2139c20e4bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "published-proof-of-concept", "source": "Telegram/p4lssD2r3oSedXIz02RqCBsvQICDpdDZh6inSefTC1cUqJE", "content": "", "creation_timestamp": "2026-08-21T00:00:10.864534Z"}]}