← All vendors
Vendor
CISA KEV & Exploit Status
The CISA Known Exploited Vulnerabilities catalog tracks CVEs with confirmed active exploitation. Coverage includes new KEV additions, BOD 22-01 remediation deadlines, EPSS context, and guidance on using KEV status for patch prioritization.
Articles
● Breaking
cisa kev
CISA Adds Seven Exploited Flaws to KEV Catalog
CISA added seven actively exploited vulnerabilities to KEV on September 3, including a critical Sangoma Switchvox SQL injection. Federal agencies face BOD 26-04 remediation deadlines.
read →
cisa kev
What Is EPSS? Exploit Prediction Scoring Explained
EPSS scores predict 30-day exploitation probability. A CVE with CVSS 6.5 and EPSS 0.94 deserves more urgency than a CVSS 9.8 with EPSS 0.01.
read →
Explainer
cisa kev
What Is the CISA KEV Catalog?
CISA's Known Exploited Vulnerabilities catalog explained: what gets added, why it matters beyond federal agencies, and how to use it to prioritize patching.
read →