Vulnerabilities
Resolved last week, the vulnerability was exploited in the wild as a zero-day to execute scripts with root privileges.
Hi, what are you looking for?
SecurityWeek
All posts tagged "CISA KEV"
Vulnerabilities
CISA expanded the KEV catalog with eight flaws, but five of them have been flagged as exploited before.
Vulnerabilities
To optimize management of CVE volume, entries that do not meet specific criteria will not be automatically enriched.
Vulnerabilities
Experts say this is the second-largest Microsoft Patch Tuesday ever based on CVE count.
Vulnerabilities
The security defects allow attackers to escalate privileges and execute arbitrary code remotely.
Malware & Threats
Insufficient sanitization of CSS content within HTML emails leads to inline script execution when the message is opened in a browser.
Vulnerabilities
The SharePoint remote code execution vulnerability CVE-2026-20963, which Microsoft patched in January, has been exploited in the wild.
Vulnerabilities
Tracked as CVE-2025-47813, the flaw leads to the disclosure of the full local installation path of the application.
Vulnerabilities
CISA has added the high-severity authentication bypass vulnerability to its KEV list, along with SolarWinds and Workspace One bugs.
Vulnerabilities
The nation-state-grade iOS exploit kit targets 23 vulnerabilities affecting iOS 13 to 17.2.1.
ICS/OT
The vulnerability was disclosed and mitigated in 2021 but its in-the-wild exploitation has only now come to light.
Nation-State
The vulnerability in TeamT5 ThreatSonar Anti-Ransomware was recently added to CISA’s KEV catalog.
Email Security
Patched in December 2025, the exploited flaw leads to XSS attacks via the animate tags in SVG documents.
Vulnerabilities
The vulnerability added to CISA’s KEV catalog affects ThreatSonar Anti-Ransomware and it was patched in 2024.
Vulnerabilities
Disclosed at the end of January, the SolarWinds vulnerability was likely exploited as a zero-day since December 2025.
Risk Management
The KEV list is useful but largely misunderstood. KEVology explains what it is, and how best to use it.
Vulnerabilities
The security defect allows unauthenticated attackers to execute arbitrary code remotely via malicious HTTP requests.
Government
CISA updated 59 KEV entries in 2025 to specify that the vulnerabilities have been exploited in ransomware attacks.
Vulnerabilities
CISA has added the Zimbra flaw to the KEV catalog along with three other bugs exploited in the wild.
Vulnerabilities
The Emergency Directives were retired because they achieved objectives or targeted vulnerabilities included in the KEV catalog.
ICS/OT
Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs.
Vulnerabilities
Malware & Threats
Artificial Intelligence
Cybercrime
Artem Stryzhak was sentenced to 70 months in prison after pleading guilty to using Nefilim ransomware in attacks.
Cybersecurity Funding
Vulnerabilities
Vulnerabilities
