CISA ADDS FOUR ACTIVELY EXPLOITED PALO ALTO NETWORKS, CISCO, AND AHSAY VULNERABILITIES TO KEV CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED MICROSOFT WINDOWS AND IVANTI CONNECT SECURE VULNERABILITIES TO KEV CATALOG Blogging
CISCO CATALYST SD-WAN MANAGER CVE-2026-76504 ADDED TO CISA KEV CATALOG AFTER CONFIRMED ACTIVE EXPLOITATION Blogging
CISA ADDS TWO ACTIVELY EXPLOITED CITRIX NETSCALER VULNERABILITIES TO KEV CATALOG: CVE-2026-88771 AND CVE-2026-88772 ELEVATED FOR PRIORITY REMEDIATION Blogging
CISA ADDS ACTIVELY EXPLOITED WORDPRESS CORE VULNERABILITY TO KEV CATALOG: CVE-2026-87902 ELEVATED FOR PRIORITY REMEDIATION Blogging
CISA ADDS ACTIVELY EXPLOITED ZYXEL GS1900 SWITCH VULNERABILITY TO KEV CATALOG: STACK-BASED BUFFER OVERFLOW CAN ENABLE UNAUTHENTICATED COMMAND EXECUTION Blogging
CISA ADDS ACTIVELY EXPLOITED LINUX KERNEL TLS VULNERABILITY TO KEV CATALOG: CVE-2025-39682 ELEVATED FOR PRIORITY REMEDIATION Blogging
CISA ADDS TWO ACTIVELY EXPLOITED LINUX KERNEL VULNERABILITIES TO KEV CATALOG: RACE CONDITION AND OUT-OF-BOUNDS WRITE NOW REQUIRE PRIORITY REMEDIATION Blogging
PAPERCUT WARNS OF ACTIVE CYBERATTACKS EXPLOITING HIGH-SEVERITY FLAWS IN NG AND MF PRINT MANAGEMENT SERVERS Active Exploitation
CISA ADDS ACTIVELY EXPLOITED ORACLE HTTP SERVER AND WEBLOGIC SERVER PROXY PLUG-IN VULNERABILITY TO KEV CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED ZIMBRA COLLABORATION SUITE COMMAND-INJECTION VULNERABILITY TO KEV CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED PROGRESS LOADMASTER COMMAND-INJECTION VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED JETBRAINS TEAMCITY DESERIALIZATION VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Active Exploitation
CISA ADDS ACTIVELY EXPLOITED N-ABLE N-CENTRAL AUTHENTICATION-BYPASS VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA ADDS TWO ACTIVELY EXPLOITED FORTINET AND ARISTA VULNERABILITIES TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA ADDS FOUR ACTIVELY EXPLOITED VULNERABILITIES TO KNOWN EXPLOITED VULNERABILITIES CATALOG Artificial Intelligence
CISA ADDS FOUR ACTIVELY EXPLOITED VULNERABILITIES TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA ADDS TWO ACTIVELY EXPLOITED FILE UPLOAD VULNERABILITIES TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED ADOBE COLDFUSION VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Adobe
CISA ADDS THREE ACTIVELY EXPLOITED VULNERABILITIES TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED SIMPLEHELP AUTHENTICATION BYPASS VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA ADDS FOUR ACTIVELY EXPLOITED VULNERABILITIES TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED JOOMLA VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA Adds Three Actively Exploited Vulnerabilities to KEV Catalog Affecting Arista EOS, Google Chromium V8, and Cisco SD-WAN Infrastructure Blogging
CISA Adds SolarWinds Serv-U Vulnerability to KEV Catalog Following Confirmed Active Exploitation Activity Blogging
CISA Issues Active Exploitation Warning for Mirasvit Deserialization Vulnerability Added to KEV Catalog Blogging
CISA Adds Actively Exploited Palo Alto Networks PAN-OS Authentication Bypass Vulnerability to KEV Catalog Blogging
CISA Adds CVE-2026-48172 LiteSpeed cPanel Plugin Vulnerability to KEV Catalog Following Active Exploitation Activity Blogging
CISA Adds Actively Exploited Drupal Core SQL Injection Vulnerability to KEV Catalog Active Exploitation
CISA Adds Seven Known Exploited Vulnerabilities to KEV Catalog Following Active Exploitation Activity Blogging
CISA Orders Federal Agencies to Patch Actively Exploited Cisco SD-WAN Vulnerability by Sunday AI Threat Intelligence
CISA Adds Microsoft Exchange Server Vulnerability to KEV Catalog Following Active Exploitation Activity Blogging
CISA KEV Update — Active Exploitation Confirmed in Linux Kernel Vulnerability (CVE-2026-31431) Blogging
CISA KEV UPDATE: ACTIVE EXPLOITATION CONFIRMED FOR CONNECTWISE SCREENCONNECT PATH TRAVERSAL AND MICROSOFT WINDOWS PROTECTION FAILURE Blogging
ICS ALERT: Cybersecurity and Infrastructure Security Agency EXPANDS KNOWN EXPLOITED VULNERABILITIES CATALOG WITH FOUR ACTIVELY TARGETED FLAWS ACROSS ENTERPRISE AND NETWORK DEVICES Blogging
CISA FLAGS SEVEN ACTIVELY EXPLOITED VULNERABILITIES ACROSS MICROSOFT, ADOBE, AND FORTINET SYSTEMS Blogging
FORTINET EMS EXPOSURE — CISA ADDS ACTIVELY EXPLOITED ACCESS CONTROL VULNERABILITY TO KEV CATALOG AS ENTERPRISE ENDPOINT INFRASTRUCTURE TARGETED Blogging
ACTIVE EXPLOITATION ALERT: GOOGLE DAWN USE-AFTER-FREE VULNERABILITY ENTERS FEDERAL PRIORITY INDEX Blogging
KEV CATALOG EXPANSION — F5 BIG-IP REMOTE CODE EXECUTION VULNERABILITY ADDED AFTER ACTIVE EXPLOITATION CONFIRMED Blogging
ACTIVE EXPLOITATION CONFIRMED — CISA ADDS LANGFLOW CODE INJECTION FLAW TO KEV CATALOG, SIGNALING IMMEDIATE RISK TO FEDERAL AND PRIVATE SYSTEMS Blogging
ACTIVE EXPLOITATION ALERT: CISA ADDS CVE-2026-25108 FILEZEN COMMAND INJECTION TO KEV CATALOG Blogging
CISA Orders Emergency Patch After Exploited SolarWinds Web Help Desk Vulnerability Bypasses Prior Fixes Blogging
Active Exploitation of “MongoBleed” Vulnerability Triggers Emergency Patching Across U.S. and Australian Systems Blogging
