CISA has added CVE-2025-62593, a critical Ray flaw that can lead to remote code execution through DNS rebinding attacks in Firefox and Safari, to its Known Exploited Vulnerabilities catalog due to active exploitation. The issue affects Ray development environments and has been linked to abuse by the RondoDox botnet and attacks such as ShadowRay 2.0, while Ray 2.52.0 contains the fix. #Ray #CVE-2025-62593 #RondoDox #ShadowRay2.0
Keypoints
- CISA added CVE-2025-62593 to its KEV catalog because it is being actively exploited.
- The flaw in Ray can enable remote code execution through a DNS rebinding attack.
- The attack can be triggered through browsers such as Mozilla Firefox and Apple Safari.
- Ray 2.52.0 addresses the vulnerability and is the recommended update.
- The issue has been associated with RondoDox and attacks tied to ShadowRay 2.0.
Read More: https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html