Known Exploited Vulnerabilities Catalog - CISA
For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative …
The KEV Catalog - CISA
A list of Known Exploited Vulnerabilities.
Reducing the Significant Risk of Known Exploited Vulnerabilities - CISA
Learn about the importance of CISA's Known Exploited Vulnerability (KEV) catalog and how to use it to help build a collective resilience across the cybersecurity community.
CISA Adds One Known Exploited Vulnerability to Catalog
Jul 10, 2025 · CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Jan 7, 2026 · Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common …
KEV Catalog Reaches 1000, What Does That Mean and What Have We …
Sep 18, 2023 · The KEV should be easy to use – ideally incorporated into tools already being used to prioritize vulnerability management. Federal agencies are able to see their open KEVs in their …
Key Cyber Initiatives from CISA: KEV Catalog, CPGs, and PRNI
Jan 7, 2025 · The KEV Catalog, CPGs, and PRNI exemplify CISA’s commitment to fostering collaboration across public and private sectors. These initiatives have helped to reshape …
BOD 22-01: Reducing the Significant Risk of Known Exploited ...
Nov 3, 2021 · As a reminder, the KEV is part of a risk-reduction action for federal civilian executive branch agencies as defined in BOD-22-01 (Binding Operational Directive 22-01 | CISA). This …
CISA Mitigation Instructions for CVE-2025-0282
This page contains the mitigation instructions that correspond to the CISA KEV catalog entry CVE-2025-0282 – Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow …
CISA Adds One Vulnerability to the KEV Catalog
Jan 8, 2025 · Ivanti Connect Secure Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. CISA urges …