Ray browser-based RCE flaw (CVE-2025-62593)
Vulnerability
Summary
Hide ▲
Show ▼
CISA added CVE-2025-62593 in Ray to its KEV catalog after evidence of active exploitation, raising the risk of browser-based remote code execution for exposed deployments. The flaw can be triggered through DNS rebinding in Mozilla Firefox and Apple Safari, especially against Ray development and testing instances. A fixed release, Ray 2.52.0, is available, and FCEB agencies must apply mitigations by August 20, 2026.
Related Happenings
CISA KEV mitigation for Ray CVE-2025-62593
Public Sector Action
H score46
First: 18.08.2026 09:34
Last: 18.08.2026 09:34
Sources 1
How related:
"In light of active exploitation of CVE-2025-62593, Federal Civilian Executive Branch (FCEB) agencies are recommended to apply necessary fixes and mitigations by August 20, 2026."
About this happening:
CISA added Ray's CVE-2025-62593 to the KEV catalog and told FCEB agencies to apply fixes and mitigations by August 20, 2026, escalating an actively exploited...
CISA KEV mitigation for Ray CVE-2025-62593
Public Sector ActionHow related: "In light of active exploitation of CVE-2025-62593, Federal Civilian Executive Branch (FCEB) agencies are recommended to apply necessary fixes and mitigations by August 20, 2026."
About this happening: CISA added Ray's CVE-2025-62593 to the KEV catalog and told FCEB agencies to apply fixes and mitigations by August 20, 2026, escalating an actively exploited...
Timeline
-
18.08.2026 09:34 1 articles · 3h ago
RondoDox adds CVE-2025-62593 to its arsenal
Campaign Scope UpdateThreat actors behind the RondoDox DDoS botnet incorporated CVE-2025-62593 in Ray into their arsenal after a proof-of-concept exploit became available, indicating operational use of the browser-mediated flaw before public disclosure on November 26, 2025.
Show sources
- CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE — thehackernews.com — 18.08.2026 09:34
-
18.08.2026 09:34 2 articles · 3h ago
CISA adds Ray flaw CVE-2025-62593 to the KEV catalog
Legal Policy Action UpdateCISA added CVE-2025-62593 in Ray to the Known Exploited Vulnerabilities catalog after evidence of active exploitation and warned Federal Civilian Executive Branch agencies to apply fixes and mitigations by August 20, 2026. The flaw can enable browser-based remote code execution via DNS rebinding in Mozilla Firefox and Apple Safari.
Show sources
- CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE — thehackernews.com — 18.08.2026 09:34
- CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE — thehackernews.com — 18.08.2026 09:34