CISA
CISA Adds CVE-2025-32432 to Known Exploited Vulnerabilities Catalogue
According to CISA, the Known Exploited Vulnerabilities (KEV) Catalog currently shows one entry for Craft CMS: CVE-2025-32432, described as a Craft CMS code injection vulnerability that allows a remote attacker to execute arbitrary code. The entry notes that the vulnerability has a Date Added of 20 March 2026 and a Due Date of 3 April 2026. It also states that it is “Unknown” whether it is known to be used in ransomware campaigns.
Related notes provide links to the Craft CMS knowledge base, GitHub advisories, and the NVD entry for CVE-2025-32432. The KEV record lists CWE-94 as the related weakness and advises applying mitigations per vendor instructions, following applicable cloud guidance, or discontinuing use if mitigations are unavailable. This entry is part of CISA’s effort to prioritise vulnerabilities actively exploited in the wild to help organisations manage risk.
Story timeline CVE-2025-32432
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Fri 20 Mar · 15:52 UTC | CISA | CISA Adds CVE-2025-32432 to Known Exploited Vulnerabilities Catalogue |
| Fri 20 Mar · 16:23 UTC | CISA | CISA Adds CVE-2025-32432 to Known Exploited Vulnerabilities Catalogue (this article) |
| Fri 20 Mar · 16:55 UTC | CISA | CISA Adds Five Known Exploited Vulnerabilities to Catalog |
| Sat 21 Mar · 09:11 UTC | The Hacker News | CISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Orders Patching by April 3, 2026 |
| Sun 22 Mar · 15:13 UTC | Security Affairs | U.S. CISA adds Apple, Laravel Livewire and Craft CMS flaws to its Known Exploited Vulnerabilities catalog |