Public exploitation evidence

CVE-2025-71243

As of 2026-07-28, CVE-2025-71243 has substantial public exploitation evidence: a public exploit module. Most recent observation: 2026-04-03.

Published to NVD: 2026-02-19.

Observation timeline

Every public observation ESIP has recorded for this CVE, with its source and date. Follow any one to the original evidence.

ObservationSourceDate
Public exploit module Metasploit 2026-04-03 View →

Exposure class & technique

This is one exposure signal: it describes an exposure class, not any one organization's assets. The MITRE ATT&CK techniques mapped to it:

T1027 · Obfuscated Files or InformationT1059 · Command and Scripting Interpreter

Weakness (CWE)

The MITRE CWE weakness type classified for this exposure class:

CWE-94 · Improper Control of Generation of Code ('Code Injection')
Commercial assessment

ESIP's current exposure signal for this CVE, its lifecycle state, trend, velocity, and corroboration, is available through the commercial API.

Get the assessment →

Public evidence is not the whole picture. Limited or absent observed evidence is not the same as safety.

Related CVEs

Related CVEs: those that share an ATT&CK technique or CWE weakness with this one.

Look it up yourself

Get a free key and look up any CVE yourself.

New to this? See what an exposure signal is and how ESIP builds one.

Data provided by ESIP / ZenzizenSec — www.exposuresignal.io · as of 2026-07-28