CISA Known Exploited Vulnerabilities
The CISA Known Exploited Vulnerabilities (KEV) catalog is the authoritative list of CVEs confirmed to be exploited in the wild. Under Binding Operational Directive 22-01, US federal civilian agencies must remediate each entry by its due date, which makes KEV additions the strongest patch-now signal in vulnerability management. CSIRTS.com flags every advisory that references a KEV-listed CVE as exploited.
CSIRTS.com ingests CISA Known Exploited Vulnerabilities every 3 hours, normalizes each advisory into a common schema and cross-references every CVE against the CISA KEV catalog and public exploit datasets. Publishes catalog additions with required remediation dates. Also available via RSS, JSON API and the MCP server.
Latest from CISA Known Exploited Vulnerabilities
CVE-2026-86060: MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
CVE-2026-20079: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
CVE-2026-87491: Google Chromium V8 Out of Bounds Write Vulnerability
CVE-2025-25249: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
CVE-2026-19490: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
CVE-2026-85880: Microsoft Windows Heap-Based Buffer Overflow Vulnerability
CVE-2026-86218: N-able N-central Static Code Injection Vulnerability
CVE-2026-81963: Microsoft Windows Link Following Vulnerability
CVE-2026-75650: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
CVE-2026-85046: Google Chromium V8 Type Confusion Vulnerability
CVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerability
CVE-2026-83548: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
CVE-2026-9586: Sangoma Switchvox SQL Injection Vulnerability
CVE-2026-82329: JFrog Artifactory Improper Authentication Vulnerability
CVE-2026-49869: Kestra OSS OS Command Injection Vulnerability
CVE-2026-48710: Kludex Starlette HTTP Request/Response Smuggling Vulnerability
CVE-2026-59822: BerriAI LiteLLM Improper Authentication Vulnerability
CVE-2026-81578: PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
CVE-2026-82078: PaperCut NG/MF Unsafe Reflection Vulnerability
CVE-2026-66384: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
CVE-2026-53362: Linux Kernel Unspecified Vulnerability
CVE-2023-49105: ownCloud Improper Authentication Vulnerability
CVE-2019-1068: Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2026-8452: Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Browse all 1,705 advisories from CISA Known Exploited Vulnerabilities →
Never miss a CISA Known Exploited Vulnerabilities advisory. The daily briefing covers every new advisory from this source — alongside the other feeds we watch for you. Subscribe free — one email every morning after 06:00 UTC, one-click unsubscribe. Tracking specific products instead? Watch them from any product page and get alerted only when they ship a new advisory.