🧰 Known Exploited Vulnerabilities Catalog

The items that name it 22

• Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
  article2026-11-02It is written here as Known Exploited Vulnerabilities (KEV) catalog.

  CISA catalog that listed CVE-2026-104935 from October 13, and CVE-2026-111357 and CVE-2026-118527 from Friday after the article's Thursday advisory update; federal agencies had until November 2 for CVE-2026-111357 and November 13 for CVE-2026-118527

• CISA Adds Two Known Exploited Vulnerabilities to Catalog
  advisory2026-10-30It is written here as Known Exploited Vulnerabilities (KEV) Catalog.

  CISA's catalog of vulnerabilities with evidence of active exploitation; two Ivanti Connect Secure CVEs were added to it

• CISA says max severity GitLab flaw now exploited in the wild
  article2026-10-30It is written here as Known Exploited Vulnerabilities (KEV) Catalog.

  CISA catalog of actively exploited flaws; CVE-2026-97229 was added after CISA confirmed active exploitation

• Drupal warns of critical Commerce Core flaw exploited in attacks
  article2026-10-30It is written here as Known Exploited Vulnerabilities (KEV) Catalog.

  CISA catalog that added the Drupal SQL injection flaw CVE-2026-9082 days after Drupal's May warning; federal agencies were ordered to patch within three days

• Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
  article2026-10-30It is written here as Known Exploited Vulnerabilities (KEV) catalog.

  CISA catalog to which CVE-2026-97229 was added on Thursday, with federal agencies urged to patch within three days

• CISA Adds Two Known Exploited Vulnerabilities to Catalog
  advisory2026-10-29It is written here as Known Exploited Vulnerabilities (KEV) Catalog.

  CISA's catalog of vulnerabilities with evidence of active exploitation. Two entries were added: CVE-2026-97229 and CVE-2026-76418.

• What are shell vulnerabilities? PHP2Shell, Node2Shell (HTTP2Shell), React2Shell and Log4Shell explained
  article2026-10-29It is written here as CISA known exploited vulnerabilities list.

  CISA added React2Shell to its list of vulnerabilities exploited in real attacks.

• CISA Adds Two Known Exploited Vulnerabilities to Catalog
  advisory2026-10-28It is written here as Known Exploited Vulnerabilities (KEV) Catalog.

  CISA catalog of vulnerabilities with evidence of active exploitation; two entries were added on 28 October 2026 and it guides remediation priority

• CISA Adds Two Known Exploited Vulnerabilities to Catalog
  advisory2026-10-27It is written here as Known Exploited Vulnerabilities (KEV) Catalog.

  CISA's catalog of vulnerabilities with evidence of active exploitation; two entries were added on the page's date (27 October 2026), CVE-2026-48356 and CVE-2026-111497

• lee1981 (@lee1981b) on X
  advisory2026-10-27It is written here as CISA Known Exploited Vulnerabilities (KEV) catalogue: checked for exploitation status, no exact match..

  KEV

• CISA Adds Two Known Exploited Vulnerabilities to Catalog
  advisory2026-10-26It is written here as Known Exploited Vulnerabilities (KEV) Catalog.

  CISA catalog that gained two PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, on 26 October 2026; used to prioritize remediation of exploited vulnerabilities

• lee1981 (@lee1981b) on X
  article2026-10-25It is written here as CISA Known Exploited Vulnerabilities (KEV) catalogue: lists SiteGuard (added 20 October 2026, due 23 October 2026, forensic triage Yes), Siemens and Arista (26 October 2026, triage Yes).

  KEV

• Argus – a free, open-source agentic security operations platform – MIT
  tool2026-10-24It is written here as CISA Known Exploited Vulnerabilities list: used by Argus to prioritise vulnerabilities, alongside exploit-likelihood scoring.
• There's only so much code: the rise in vulnerability numbers
  article2026-10-20It is written here as Known Exploited Vulnerabilities (KEV) list: tracks distinct vulnerabilities known to be exploited; additions up 37% year over year while published CVEs rose 105%.

  KEV

• lee1981 (@lee1981b) on X
  article2026-10-18It is written here as CISA Known Exploited Vulnerabilities (KEV) catalogue: tracks exploited CVEs; Ivanti, Cisco and BeyondTrust listed, BotSharp, GitLab and PwnEscape not.

  KEV

• Your CVE is reachable. But is it exploitable?
  article2026-10-17It is written here as KEV (CISA Known Exploited Vulnerabilities catalog): list of CVEs with confirmed exploitation in the wild, about 1,700 CVEs as of October 2026..

  CISA Known Exploited Vulnerabilities catalog

• leepokai/jev-guard
  tool2026-09-17It is written here as Kev (jaredpalmer/kev-4b): alternative model that can be run locally through JEV_BASE_URL.

  jaredpalmer/kev-4b

• How Should I Prioritize Software Vulnerabilities? | Blog | Endor Labs
  article2026-09-11It is written here as KEV (Known Exploited Vulnerabilities catalog).

  CISA catalog of CVEs with reliable evidence of active exploitation and a clear remediation action; had 977 entries as of writing

• OWASP OSS Risk 1: Known Vulnerabilities | Blog | Endor Labs
  article2026-09-11It is written here as Known Exploited Vulnerabilities (KEV) Catalog.

  Database maintained by CISA of vulnerabilities that have actually been exploited in the wild

• FedRAMP Requirements for Vulnerability Management and Dependency Upgrades | Blog | Endor Labs
  article2026-09-11It is written here as CISA Known Exploited Vulnerability (KEV) catalog.

  List of vulnerabilities whose presence in containers is prohibited under FedRAMP requirements

• What is CVE remediation in 2026?
  article2026-08-21It is written here as CISA Known Exploited Vulnerabilities (KEV) list.

  Catalog of actively exploited CVEs that Aikido Security prioritizes for free community backported fixes.

• n8n Cybersecurity Workflows
  repo2026-05-06It is written here as KEV (Known Exploited Vulnerabilities).

  CVE prioritization data source