🧰 CISA KEV Nomination Form

The items that name it 3

• CISA Adds Two Known Exploited Vulnerabilities to Catalog
  advisory2026-10-27

  Lets the public submit an exploited vulnerability for possible KEV addition; it needs a CVE ID, evidence of exploitation and clear mitigation guidance

• CISA KEV: Fortinet FortiMail CVE-2026-104286 path traversal, actively exploited, no patch yet
  advisoryIt is written here as CISA KEV Nomination Form (for submitting an exploited vulnerability not currently listed for potential addition; requires a CVE ID, evidence of exploitation, and clear mitigation guidance).

  for submitting an exploited vulnerability not currently listed for potential addition; requires a CVE ID, evidence of exploitation, and clear mitigation guidance

• CISA Adds Seven Known Exploited Vulnerabilities to Catalog | CISA
  advisoryIt is written here as CISA KEV Nomination Form: submission channel for exploited vulnerabilities not yet in the KEV Catalog; nominations must have a CVE ID, evidence of exploitation, and clear mitigation guidance.