Known Exploited Vulnerabilities Catalog - CISA
For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains …
CISA Adds One Known Exploited Vulnerability to Catalog
Jul 10, 2025 · CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
CISA Adds Five Known Exploited Vulnerabilities to Catalog
Oct 20, 2025 · CISA has added five new vulnerabilities to its KEV Catalog, based on evidence of active exploitation.
UPDATE: Microsoft Releases Guidance on Exploitation of ... - CISA
Aug 6, 2025 · . For more information see MAR-251132.c1.v1 Exploitation of SharePoint Vulnerabilities and CISA Releases Malware Analysis Report Associated with Microsoft …
CISA Adds Two Known Exploited Vulnerabilities to Catalog, …
Oct 4, 2023 · CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation: CVE-2023-42793 JetBrains TeamCity …
CISA Adds Five Known Exploited Vulnerabilities to Catalog
Sep 29, 2025 · CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2021-21311
Update to How CISA Shares Cyber-Related Alerts and Notifications
Update May 13: In an effort to enhance user experience and highlight the most timely and actionable information for cyber defenders, CISA announced a shift in how we share …
Home Page | CISA
CISA’s Emergency Directive 26-01 calls on federal agencies to identify, analyze, and mitigate vulnerabilities in F5 products to protect against an ongoing exploitation by nation-state threat …
Subscribe to Updates from CISA
Subscribing to automatic updates from CISA.gov is often the best way to stay on top of breaking news and information about our mission areas. Use this page to sign up for e-mail updates, …
Reducing the Significant Risk of Known Exploited Vulnerabilities
Learn about the importance of CISA's Known Exploited Vulnerability (KEV) catalog and how to use it to help build a collective resilience across the cybersecurity community.