🧰 CISA KEV catalog

The items that name it 9

• Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems
  article2026-10-27It is written here as CISA KEV catalog: source from which most Blue Initiative entries are pulled automatically and mapped to maritime systems.
• Dark Web Intelligence (@DailyDarkWeb) on X
  thread2026-10-18It is written here as CISA KEV catalog: the CVEs are not listed.
• Critical GitLab RCE Lets Unauthenticated Attackers Execute Code on Servers (CVE-2026-97229)
  advisory2026-10-14It is written here as CISA KEV catalog: referenced for the prior GitLab flaw CVE-2026-85706.
• Frequently Asked Questions About the Atlassian Jira & Confluence Arbitrary File Read Vulnerability (CVE-2026-21589)
  advisory2026-10-06

  Catalog to which earlier Atlassian Jira and Confluence vulnerabilities were added after exploitation in the wild.

• FOSSA: EU CRA Vulnerability/Incident Reporting Obligations Take Effect
  article2026-09-12

  U.S.-government maintained list of vulnerabilities with evidence of exploitation, used to help identify actively exploited vulnerabilities for CRA reporting

• Combining EPSS and Reachability Analysis to Optimize Vulnerability Management | Blog | Endor Labs
  article2026-09-11It is written here as CISA KEV (Known Exploited Vulnerability) catalog.

  Public listing of vulnerabilities exploited in the wild, used by EPSS as a data source for public mentions of exploitation

• 91 Vulnerabilities Patched in Spring Application Framework
  article2026-08-24

  Catalog of known exploited vulnerabilities, cited as currently including several Spring vulnerabilities.

• BOD 26-04 Just Changed How Federal Agencies Prioritize Vulnerabilities.
  article2026-08-20It is written here as CISA KEV catalog (Known Exploited Vulnerabilities).

  Catalog of vulnerabilities confirmed as actively exploited, monitored by agencies per BOD 26-04 Phase 1 and used as an input to remediation tier determination

• Full Fathom Five: The context of Anthropic’s Mythos-class public release
  article2026-06-13It is written here as CISA KEV catalog (Known Exploited Vulnerabilities catalog; criticized as over-fetishized for prioritization).

  Known Exploited Vulnerabilities catalog; criticized as over-fetishized for prioritization