🧰 CISA KEV

The items that name it 131

• CISA Adds Two Known Exploited Vulnerabilities to Catalog
  advisoryas classification.technologies2026-10-30
• CISA Adds Two Known Exploited Vulnerabilities to Catalog
  advisoryas classification.technologies2026-10-29
• What are shell vulnerabilities? PHP2Shell, Node2Shell (HTTP2Shell), React2Shell and Log4Shell explained
  articleas classification.key entities2026-10-29
• A quiet week in infosec <.<
  articleas classification.key entities2026-10-29
• CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks
  articleas classification.key entities2026-10-29
• lee1981 (@lee1981b) on X
  advisoryas tools2026-10-29

  Catalogue checked for the CVE; no exact match in the 2026.10.28 release of 1,762 entries.

• Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day
  articleas classification.key entities2026-10-29
• Node2Shell: Reproducing CVE-2026-111497 in the Node.js Brotli decoder
  writeupas classification.key entities2026-10-29
• CVE-2026-101767: Critical Oracle EBS SQL Injection Actively Probed in the Wild
  advisoryas classification.key entities2026-10-28
• CISA Adds Two Known Exploited Vulnerabilities to Catalog
  advisoryas classification.technologies2026-10-28
• Christiaan Stoudt (@cstoudt) on X
  threadas classification.key entities2026-10-28
• lee1981 (@lee1981b) on X
  advisoryas tools2026-10-28

  Checked for the CVE: no exact match in catalogue 2026.10.27 with 1,760 entries

• CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
  articleas classification.key entities2026-10-28
• CISA Adds Two Known Exploited Vulnerabilities to Catalog
  advisoryas classification.key entities2026-10-27
• The Impact of AI on CVEs: Industry Challenges
  articleas classification.key entities2026-10-27
• PHP2Shell: Exploitation Attempts and Remediation Trends
  articleas classification.key entities2026-10-27
• lee1981 (@lee1981b) on X
  advisoryas classification.key entities2026-10-27
• This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
  articleas classification.key entities2026-10-27
• Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems
  articleas classification.technologies2026-10-27
• CISA Adds Two Known Exploited Vulnerabilities to Catalog
  advisoryas classification.technologies2026-10-26
• PHP2Shell Exploitation Moves From Probes to Working Shells
  articleas classification.key entities2026-10-26
• lee1981 (@lee1981b) on X
  articleas classification.technologies2026-10-26
• lee1981 (@lee1981b) on X
  articleas classification.key entities2026-10-25
• Argus – a free, open-source agentic security operations platform – MIT
  toolas classification.key entities2026-10-24
• Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
  articleas classification.key entities2026-10-23
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-23
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-22
• lee1981 (@lee1981b) on X
  articleas classification.key entities2026-10-21
• Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated Oct 20)
  advisoryas classification.key entities2026-10-20
• Frequently Asked Questions About PHP Remote Code Execution (PHP2Shell CVE-2026-109618 & CVE-2026-109619)
  advisoryas classification.key entities2026-10-20
• There's only so much code: the rise in vulnerability numbers
  articleas classification.key entities2026-10-20
• lee1981 (@lee1981b) on X
  advisoryas classification.key entities2026-10-20
• Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack
  articleas classification.key entities2026-10-19
• lee1981 (@lee1981b) on X
  advisoryas classification.key entities2026-10-19
• Dark Web Intelligence (@DailyDarkWeb) on X
  threadas classification.key entities2026-10-18
• lee1981 (@lee1981b) on X
  articleas classification.key entities2026-10-18
• Dark Web Intelligence (@DailyDarkWeb) on X
  threadas classification.technologies2026-10-18
• Your CVE is reachable. But is it exploitable?
  articleas classification.key entities2026-10-17
• lee1981 (@lee1981b) on X
  advisoryas classification.key entities2026-10-17
• Frequently Asked Questions About the BeyondTrust Remote Support Arbitrary File Upload (CVE-2026-102764)
  advisoryas classification.key entities2026-10-16
• BeyondTrust Remote Support Arbitrary File Upload (CVE-2026-102764)
  advisoryas classification.key entities2026-10-16
• lee1981 (@lee1981b) on X
  threadas classification.key entities2026-10-16
• The Q3 Vulnerability Pulse: Discovery ≠ Exploitation
  articleas classification.technologies2026-10-15
• lee1981 (@lee1981b) on X
  advisoryas classification.key entities2026-10-15
• Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution
  articleas classification.key entities2026-10-15
• Cisco Warns of Exploited Secure Email Gateway Vulnerability
  articleas classification.key entities2026-10-15
• Critical GitLab RCE Lets Unauthenticated Attackers Execute Code on Servers (CVE-2026-97229)
  advisoryas classification.key entities2026-10-14
• lee1981 (@lee1981b) on X
  threadas classification.technologies2026-10-14
• Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
  articleas classification.key entities2026-10-14
• Dark Web Intelligence (@DailyDarkWeb) on X
  advisoryas classification.key entities2026-10-13
• Dark Web Intelligence (@DailyDarkWeb) on X
  threadas classification.key entities2026-10-13
• Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)
  advisoryas classification.key entities2026-10-13
• Frequently Asked Questions About the Ivanti Connect Secure Authentication Bypass by Spoofing (CVE-2026-104935)
  advisoryas classification.key entities2026-10-13
• Ivanti Connect Secure Authentication Bypass by Spoofing (CVE-2026-104935)
  advisoryas classification.key entities2026-10-13
• lee1981 (@lee1981b) on X
  advisoryas classification.key entities2026-10-13
• Guide to Implementing Software Supply Chain Security | Endor Labs
  articleas classification.key entities2026-10-12
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-12
• ThreatWire (@ThreatWire_) on X
  threadas classification.key entities2026-10-10
• lee1981 (@lee1981b) on X
  advisoryas classification.key entities2026-10-10
• Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578)
  writeupas classification.key entities2026-10-09
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-09
• lee1981 (@lee1981b) on X
  writeupas classification.technologies2026-10-08
• Configuring your AI vulnerability harness, Part 2: The steering file
  articleas classification.technologies2026-10-07
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-07
• Atlassian Patches Critical Vulnerability Affecting 8 Products
  advisoryas classification.technologies2026-10-07
• Atlassian Jira, Confluence (and more) Arbitrary File Read Vulnerability (CVE-2026-21589)
  advisoryas classification.key entities2026-10-06
• Frequently Asked Questions About the Atlassian Jira & Confluence Arbitrary File Read Vulnerability (CVE-2026-21589)
  advisoryas classification.key entities2026-10-06
• lee1981 (@lee1981b) on X
  writeupas classification.key entities2026-10-06
• Citrix NetScaler Zero-Day Exploited in the Wild Crashes SAML Authentication Services
  advisoryas classification.technologies2026-10-05
• Dark Web Intelligence (@DailyDarkWeb) on X
  threadas classification.technologies2026-10-03
• Dark Web Intelligence (@DailyDarkWeb) on X
  threadas classification.technologies2026-10-01
• Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)
  advisoryas classification.technologies2026-09-30
• Critical Citrix NetScaler Zero-Days Under Active Exploitation
  advisoryas classification.key entities2026-09-29
• Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772
  advisoryas classification.key entities2026-09-28
• watchTowr: CVE-2026-88771 Citrix NetScaler ADC/Gateway unauthenticated RCE
  advisoryas classification.technologies2026-09-27
• Proactive Defense: Hardening Code Pipelines and CI/CD Infrastructure
  articleas classification.key entities2026-09-24
• When Business Email Compromise Starts Rewriting Reality
  writeupas classification.key entities2026-09-24
• CVE-2026-94127: Critical Unauthenticated RCE in F5 BIG-IP APM
  advisoryas classification.technologies2026-09-23
• Cyber Resilience Act is here! Myth busting and first impressions
  articleas classification.technologies2026-09-23
• ThreatIntel-Aggregator
  repoas classification.key entities2026-09-17
• The Apple Security Update Review for September 2026
  articleas tools2026-09-16It is written here as CISA KEV (Known Exploited Vulnerabilities catalog).

  Catalog confirming CVE-2026-65400 is actively exploited

• CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
  advisoryas classification.key entities2026-09-15
• Breaking: GitLab Critical Path Traversal Flaw Exploited in the Wild — Patch Immediately
  advisoryas classification.key entities2026-09-14
• CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild
  advisoryas classification.technologies2026-09-14
• FOSSA: EU CRA Vulnerability/Incident Reporting Obligations Take Effect
  articleas classification.key entities2026-09-12
• How Should I Prioritize Software Vulnerabilities? | Blog | Endor Labs
  articleas classification.key entities2026-09-11
• Combining EPSS and Reachability Analysis to Optimize Vulnerability Management | Blog | Endor Labs
  articleas classification.key entities2026-09-11
• OWASP OSS Risk 1: Known Vulnerabilities | Blog | Endor Labs
  articleas classification.key entities2026-09-11
• FedRAMP Requirements for Vulnerability Management and Dependency Upgrades | Blog | Endor Labs
  articleas classification.key entities2026-09-11
• Metasploit Wrap Up: This One Goes to Sixteen!
  articleas classification.key entities2026-09-11
• Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329
  advisoryas tools2026-09-10

  Catalog to which CVE-2026-82329 has been added as a known exploited vulnerability.

• The CVE spike across major software companies is a remediation problem
  articleas classification.key entities2026-09-10
• Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise
  writeupas classification.key entities2026-09-09
• mukul975/cve-mcp-server
  repoas tools2026-09-07

  Known Exploited Vulnerabilities catalog; confirmed active exploitation status; updates on US business days only

• Inside 90 days of attacks on AI infrastructure
  writeupas classification.key entities2026-08-27
• ThreatRadar
  repoas tools2026-08-27

  Known Exploited Vulnerabilities catalog used as a feed/reference source

• 91 Vulnerabilities Patched in Spring Application Framework
  articleas classification.key entities2026-08-24
• What is CVE remediation in 2026?
  articleas classification.key entities2026-08-21
• N4D Mesh Controller: New infrastructure, a UPX-packed agent labeled "go-titan," and how to hunt for it
  writeupas classification.key entities2026-08-20
• Have We Seen an Acceleration in Discoveries?
  articleas classification.technologies2026-08-14
• SiberKapan
  repoas classification.key entities2026-08-08
• LLM Heist: Hijacking LiteLLM for Traffic Interception, Key Theft, and Tool-Call Injection
  writeupas classification.key entities2026-08-03
• AI Security Briefing
  advisoryas classification.key entities2026-07-18
• AI Security Briefing
  writeupas classification.key entities2026-07-18
• Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days Being Actively Exploited (CVE-2026-15409, CVE-2026-15410)
  writeupas classification.key entities2026-07-15
• The 2026 Verizon DBIR Stopped Asking How Attackers Get in and Started Asking Where They Go
  articleas classification.key entities2026-07-02
• Orca Security: Langflow RCE (CVE-2026-33017) Actively Exploited
  advisoryas classification.key entities2026-07-02
• RAPTOR
  repoas tools2026-06-28

  Known Exploited Vulnerabilities catalog used to enrich /sca findings

• FOSSA: Allan Friedman
  articleas classification.key entities2026-06-27
• NVD in the AI Era: The Case for Multi-Source Vulnerability Intelligence
  articleas classification.key entities2026-06-25
• Full Fathom Five: The context of Anthropic’s Mythos-class public release
  articleas classification.technologies2026-06-13
• Orca: 8 Container Security Best Practices for 2026
  articleas classification.key entities2026-06-11
• Socket: Federal Audit
  articleas classification.key entities2026-06-04
• CSA: VulnOps in the Age of AI
  articleas classification.key entities2026-05-13
• Marimo OSS Python Notebook RCE: From Disclosure to Exploitation in Under 10 Hours | Sysdig
  writeupas classification.key entities2026-04-09
• santosomar/AI-agents-for-cybersecurity
  repoas classification.key entities
• AI Agents for Cybersecurity: A Guided Tour of a Repository with Tons of Resources and Examples
  articleas classification.technologies
• AI Agents for Cybersecurity: A Guided Tour of a Repository with Tons of Resources and Examples
  articleas classification.key entities
• GitLab patches critical 9.9 AI Gateway template-sandbox-escape RCE (CVE-2026-90970)
  advisoryas classification.technologies
• CISA KEV: Fortinet FortiMail CVE-2026-104286 path traversal, actively exploited, no patch yet
  advisoryas classification.technologies
• Critical FortiMail Zero-Day Flaw (CVE-2026-104286)
  advisoryas classification.technologies
• Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway
  advisoryas classification.key entities
• CISA KEV Catalog Additions — Check Point, Arista VeloCloud, F5 BIG-IP (Sept 22, 2026)
  advisoryas classification.technologies
• Attackers Exploit WordPress CVE-2026-87902 Within Hours of Patch
  advisoryas classification.key entities
• Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug
  articleas classification.key entities
• LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE
  articleas classification.key entities
• CISA Adds Seven Known Exploited Vulnerabilities to Catalog | CISA
  advisoryas classification.key entities
• Known Exploited Vulnerabilities Catalog | CISA
  otheras classification.key entities
• Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks
  advisoryas classification.technologies
• Three CVEs and the May 2026 Exploit Chain Nobody's Taking Seriously (nginx Rift)
  articleas classification.key entities
• cyanheads/osv-advisory-mcp-server
  repoas classification.key entities