Is CVE-2025-61585 being actively exploited?

Actively exploited: Not listed in CISA KEV
Published: 2025-10-03
Last modified: 2025-10-03

It is not currently listed in CISA's Known Exploited Vulnerabilities catalog, and no EPSS exploit-prediction score is available yet.

How do I fix CVE-2025-61585?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

CVE-2025-61585 was published on 2025-10-03.

CVE-2025-61585 is a security vulnerability that is still awaiting full analysis and scoring.

Rejected reason: Further research determined the issue is not an independent vulnerability as it originates from Apache Felix.

What is CVE-2025-61585?: Rejected reason: Further research determined the issue is not an independent vulnerability as it originates from Apache Felix.
Is CVE-2025-61585 being actively exploited?: It is not currently listed in CISA's Known Exploited Vulnerabilities catalog, and no EPSS exploit-prediction score is available yet.
How do I fix CVE-2025-61585?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2025-61585 published?: CVE-2025-61585 was published on 2025-10-03.