CVE-2025-21042 has been added to the US cyber agency’s Known Exploited Vulnerabilities Catalog days after researchers outlined the LANDFALL spyware campaign.