CISA gives feds 3 days to fix actively exploited Ray RCE bug
CISA says attackers are exploiting CVE-2025-62593 (CVSS 9.4) to achieve remote code execution on vulnerable Ray systems via Firefox or Safari, enabled by User-Agent header checks plus DNS rebinding.
Aug 18, 2026 ·
The Register
















