The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included two security issues affecting SysAid IT support software in its Known Exploited Vulnerabilities (KEV) repository, following indications of ongoing exploitation.
The vulnerabilities under consideration are detailed below –

CVE-2025-2775 (CVSS score: 9.3) – A flawed limitation of XML external entity (XXE) reference vulnerability in the