Ray-Project
No CISA KEV deadline is open. CISA last added a Ray-Project CVE on 17 Aug.
Tracked since 17 Aug · latest article Tue 18 Aug · RSS
Exploited, by due date
CSV downloadDeadlines passed
Products
1 product · 1 CVE in coverage4 articles from 3 outlets since 17 Aug; the latest 69 days ago.
- Article
- First report
- Official notice
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Tue 18 Aug · 09:10 UTC | Security Affairs | CISA flags CVE-2025-62593 in Ray AI, orders patch by August |
| Mon 17 Aug · 19:01 UTC | SecurityOnline | Ray RCE flaw lets attackers hijack dev machines via DNS rebinding |
| Mon 17 Aug · 17:11 UTC | CISA | CISA Adds One Known Exploited Vulnerability to Catalog |
| Mon 17 Aug · 15:12 UTC | CISA | CISA warns of active Ray code injection flaw exploited via browsers |
Who reported 3 outlets, last 12 months
- CISA2
- SecurityOnline1
- Security Affairs1
- CISA flags CVE-2025-62593 in Ray AI, orders patch by AugustSecurity Affairs
- Ray RCE flaw lets attackers hijack dev machines via DNS rebindingSecurityOnline
- CISA Adds One Known Exploited Vulnerability to CatalogCISA · official notice
- CISA warns of active Ray code injection flaw exploited via browsersCISA · official notice
All CVEs in coverage
1How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.