KEV Archives • Daily CyberSecurity

CISA Adds Seven Critical Vulnerabilities to its KEV Security alert showing critical CISA KEV vulnerabilities added to the catalog

CISA Adds Seven Critical Vulnerabilities to its KEV

Do Son September 3, 2026

TL;DR Federal officials warned organizations about seven newly abused security flaws. The agency confirmed that threat actors...

CISA Vulnerability Review: Old Flaws Fuel Most Attacks CISA Vulnerability Review report showing known exploited vulnerabilities and top CWE trends

CISA Vulnerability Review report showing known exploited vulnerabilities and top CWE trends

CISA Vulnerability Review: Old Flaws Fuel Most Attacks

Do Son August 28, 2026

The newly published CISA Vulnerability Review for fiscal years 2024 and 2025 delivers a blunt message: the...

CISA Adds Oracle E-Business Suite and KNX Flaws to KEV Catalog CISA KEV catalog additions CVE-2026-46817 and CVE-2023-4346 illustration

CISA Adds Oracle E-Business Suite and KNX Flaws to KEV Catalog

Do Son July 16, 2026

TL;DR The CISA KEV catalog gained two entries on July 15, 2026. The agency confirmed active exploitation...

CISA Warns Three SharePoint Server Vulnerabilities Are Exploited in the Wild, Urges Hardening CISA alert on SharePoint vulnerabilities exploited in the wild including CVE-2026-56164

CISA alert on SharePoint vulnerabilities exploited in the wild including CVE-2026-56164

CISA Warns Three SharePoint Server Vulnerabilities Are Exploited in the Wild, Urges Hardening

Do Son July 15, 2026

TL;DR CISA has confirmed active exploitation of three SharePoint vulnerabilities: CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164. Threat actors chain...

State of Exploited Vulnerabilities — Q2 2026 75 CVEs confirmed exploited in Q2 2026. Microsoft leads with 15, Ivanti tops EPSS at 99%. Full breakdown by vendor, CWE, and publication-to-exploit gap.

75 CVEs confirmed exploited in Q2 2026. Microsoft leads with 15, Ivanti tops EPSS at 99%. Full breakdown by vendor, CWE, and publication-to-exploit gap.

State of Exploited Vulnerabilities — Q2 2026

Do Son July 11, 2026

State of Exploited Vulnerabilities — Q2 2026 Coverage period: April 1 – June 30, 2026 Data source:...

Actively Exploited Qualcomm GPU Zero-Days Added to CISA’s KEV Catalog

Do Son June 4, 2025

Three new vulnerabilities in Qualcomm’s Adreno GPU driver have been added to CISA’s Known Exploited Vulnerabilities (KEV)...

NIST Proposes New Metric to Predict “Likely Exploited” Vulnerabilities NIST LEV, vulnerability prioritization Likely Exploited Vulnerability

NIST LEV, vulnerability prioritization Likely Exploited Vulnerability

NIST Proposes New Metric to Predict “Likely Exploited” Vulnerabilities

Do Son May 22, 2025

The U.S. National Institute of Standards and Technology (NIST) is proposing a metric to address one of...

CISA Alert: Actively Exploited SonicWall SMA100 Vulnerability SonicWall vulnerability, CVE-2021-20035 Vulnerability Exploitation

CISA Alert: Actively Exploited SonicWall SMA100 Vulnerability

Do Son April 17, 2025

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert, adding CVE-2021-20035 to its Known...

CISA Flags Active Exploits in Sitecore CMS: CVE-2019-9874 and CVE-2019-9875, PoC Publishes CVE-2019-9874 & CVE-2019-9875

CISA Flags Active Exploits in Sitecore CMS: CVE-2019-9874 and CVE-2019-9875, PoC Publishes

Do Son March 27, 2025

Two critical vulnerabilities in Sitecore’s anti-CSRF module have re-emerged as active threats, with proof-of-concept exploits in circulation...

CISA Flags Actively Exploited Security Vulnerabilities in Adobe ColdFusion and Oracle Agile PLM CISA active exploit catalog known exploited vulnerabilities ActiveMQ RCE CVE-2026-34197 CISA KEV Catalog Actively Exploited Vulnerabilities CISA KEV Catalog CVE-2025-37164 GeoServer XXE, CISA KEV FortiWeb SQLi, CISA KEV Critical Vulnerabilities CVE-2024-20953

CISA active exploit catalog known exploited vulnerabilities ActiveMQ RCE CVE-2026-34197 CISA KEV Catalog Actively Exploited Vulnerabilities CISA KEV Catalog CVE-2025-37164 GeoServer XXE, CISA KEV FortiWeb SQLi, CISA KEV Critical Vulnerabilities CVE-2024-20953

CISA Flags Actively Exploited Security Vulnerabilities in Adobe ColdFusion and Oracle Agile PLM

Do Son February 24, 2025

Cybersecurity and Infrastructure Security Agency (CISA) has added two critical security vulnerabilities to its Known Exploited Vulnerabilities...

CISA Warns of Active Exploitation of Critical Flaws in BeyondTrust and Qlik Sense GUARDIANWALL MailSuite Exploit CVE-2026-32661 FileZen Vulnerability CVE-2026-25108 Ivanti EPMM Vulnerability Dormant Backdoor Fortinet Authentication Bypass CVE-2026-24858 VMware vCenter Server Flaw CVE-2025-21590

GUARDIANWALL MailSuite Exploit CVE-2026-32661 FileZen Vulnerability CVE-2026-25108 Ivanti EPMM Vulnerability Dormant Backdoor Fortinet Authentication Bypass CVE-2026-24858 VMware vCenter Server Flaw CVE-2025-21590

CISA Warns of Active Exploitation of Critical Flaws in BeyondTrust and Qlik Sense

Do Son January 13, 2025

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about two critical security vulnerabilities...

CVE-2023-28461 (CVSS 9.8): Critical Array Networks Vulnerability Added to KEV Catalog

Do Son November 25, 2024

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2023-28461, a high-severity security flaw impacting Array...

CISA Warns of Actively Exploited Vulnerabilities in Kemp LoadMaster and Palo Alto Networks PAN-OS State-Sponsored Exploitation CISA KEV Catalog F5 BIG-IP RCE CISA KEV Catalog SolarWinds WHD Exploit CVE-2025-40551 Zimbra XSS Zero-Day CVE-2025-27915 Exploited Windows Security Vulnerabilities

State-Sponsored Exploitation CISA KEV Catalog F5 BIG-IP RCE CISA KEV Catalog SolarWinds WHD Exploit CVE-2025-40551 Zimbra XSS Zero-Day CVE-2025-27915 Exploited Windows Security Vulnerabilities

CISA Warns of Actively Exploited Vulnerabilities in Kemp LoadMaster and Palo Alto Networks PAN-OS

Do Son November 19, 2024

Critical flaws in widely-used networking and security products demand immediate attention from administrators. The Cybersecurity and Infrastructure...

CVE-2024-29824: Critical Vulnerability in Ivanti Endpoint Manager Actively Exploited, PoC Published CVE-2024-29824 exploit PoC

CVE-2024-29824: Critical Vulnerability in Ivanti Endpoint Manager Actively Exploited, PoC Published

Do Son October 2, 2024

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding the active exploitation of...

CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog CVE-2023-25280

CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog

Do Son September 30, 2024

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has once again raised the alarm, adding four new...

CISA Warns of Actively Exploited Apache, Microsoft, and Oracle Vulnerabilities Oracle WebLogic

CISA Warns of Actively Exploited Apache, Microsoft, and Oracle Vulnerabilities

Do Son September 18, 2024

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning to federal agencies and organizations...

CISA & Ivanti Warn of Active Exploitation Cloud Services Appliance Flaw CVE-2024-8190 Ivanti EPM Vulnerability CVE-2026-1603 Ivanti EPM Critical XSS, Unauthenticated File Write CVE-2024-29847 & CVE-2024-8190 Ivanti ITSM, Authentication Bypass

Ivanti EPM Vulnerability CVE-2026-1603 Ivanti EPM Critical XSS, Unauthenticated File Write CVE-2024-29847 & CVE-2024-8190 Ivanti ITSM, Authentication Bypass

CISA & Ivanti Warn of Active Exploitation Cloud Services Appliance Flaw CVE-2024-8190

Do Son September 13, 2024

A high-severity vulnerability (CVE-2024-8190) in Ivanti Cloud Services Appliance (CSA) is under active exploitation, prompting an urgent...

CISA Alerts on Active Exploitation of Flaws in ImageMagick, Linux Kernel, and SonicWall SonicWall vulnerability

CISA Alerts on Active Exploitation of Flaws in ImageMagick, Linux Kernel, and SonicWall

Do Son September 9, 2024

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning, adding three actively exploited vulnerabilities...

CISA Warns of Active Exploitation in SolarWinds Web Help Desk Vulnerability CVE-2024-28986 exploitation SolarWinds Web Help Desk Linux Vulnerability CVE-2024-53197

CVE-2024-28986 exploitation SolarWinds Web Help Desk Linux Vulnerability CVE-2024-53197

CISA Warns of Active Exploitation in SolarWinds Web Help Desk Vulnerability

Do Son August 15, 2024

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned of a critical security vulnerability affecting SolarWinds Web...

CISA & Microsoft Warn of 6 Actively Exploited Zero-Day Vulnerabilities Microsoft August Patch Tuesday

CISA & Microsoft Warn of 6 Actively Exploited Zero-Day Vulnerabilities

Do Son August 13, 2024

Microsoft’s August 2024 Patch Tuesday release addresses 88 vulnerabilities, including seven critical flaws and 10 zero-day vulnerabilities....

CISA Warns: Critical Exploits Targeting Microsoft and Twilio Authy Discovered in the Wild CVE-2012-4792 and CVE-2024-39891

CISA Warns: Critical Exploits Targeting Microsoft and Twilio Authy Discovered in the Wild

Do Son July 23, 2024

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding two actively exploited...

CVE-2024-36401 (CVSS 9.8): Critical GeoServer Flaw Under Active Attack, PoC Available CVE-2024-36401 exploit

CVE-2024-36401 (CVSS 9.8): Critical GeoServer Flaw Under Active Attack, PoC Available

Do Son July 15, 2024

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding a critical vulnerability...

Critical Alert 3 Active Exploits Detected Today