The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday included two significant security weaknesses affecting Erlang/Open Telecom Platform (OTP) SSH and Roundcube in its Known Exploited Vulnerabilities (KEV) catalog, citing proof of ongoing exploitation.
The vulnerabilities under discussion are outlined below –

CVE-2025-32433 (CVSS score: 10.0) – A lack of authentication for a vital