← All sources

CISA Known Exploited Vulnerabilities

The CISA Known Exploited Vulnerabilities (KEV) catalog is the authoritative list of CVEs confirmed to be exploited in the wild. Under Binding Operational Directive 22-01, US federal civilian agencies must remediate each entry by its due date, which makes KEV additions the strongest patch-now signal in vulnerability management. CSIRTS.com flags every advisory that references a KEV-listed CVE as exploited.

CSIRTS.com ingests CISA Known Exploited Vulnerabilities every 3 hours, normalizes each advisory into a common schema and cross-references every CVE against the CISA KEV catalog and public exploit datasets. Publishes catalog additions with required remediation dates. Also available via RSS, JSON API and the MCP server.

Latest from CISA Known Exploited Vulnerabilities

Browse all 1,637 advisories from CISA Known Exploited Vulnerabilities →