Known Exploited Vulnerabilities (KEV) catalog
Definition
The Known Exploited Vulnerabilities catalog is a list maintained by the US Cybersecurity and Infrastructure Security Agency (CISA) of software flaws with evidence of active exploitation. US federal civilian agencies must fix listed flaws by set deadlines, and many private organisations use it to prioritise patching.
Why It Matters
A KEV listing is a strong signal that a vulnerability is being used in real attacks and should be patched first.
Latest Coverage
- CISA adds PHP2Shell flaws to exploited-vulnerabilities catalog with a short federal deadline 29 October 2026
- CISA adds PHP 'php2shell' remote code execution flaws to Known Exploited Vulnerabilities catalog 27 October 2026
- CISA flags actively exploited critical flaws in Arista VeloCloud Orchestrator and Collabora Online 27 October 2026
- CISA adds six actively exploited vulnerabilities to KEV catalog, some with three-day deadlines 21 October 2026
- CISA adds exploited Fortinet and BeyondTrust flaws to KEV as PEERSTITCH edge malware is disclosed 19 October 2026
- CISA flags exploited Palo Alto PAN-OS, Cisco Secure Email Gateway and Ahsay flaws 19 October 2026
- CISA urges immediate patching of exploited BeyondTrust Remote Support authentication bypass 18 October 2026
- CISA adds exploited Palo Alto PAN-OS, Cisco Secure Email Gateway and Ahsay flaws to KEV catalog 18 October 2026
- Microsoft's record October Patch Tuesday fixes 1,408 CVEs, with a SharePoint exploitation flag gap 17 October 2026
- CISA urges immediate patching of exploited Ivanti Connect Secure flaw that may evade Ivanti's own integrity tool 16 October 2026
- CISA flags actively exploited flaws in Palo Alto PAN-OS, Cisco Secure Email Gateway and Ahsay backup 16 October 2026
- CISA adds actively exploited Microsoft Windows command injection flaw CVE-2026-96951 to KEV catalog 16 October 2026
More in Cybersecurity and AI Threats.
Related Terms
Laurenceo Intelligence is the daily AI intelligence briefing published in Bermuda by Laurenceo, founded by Jorai Laurenceo. Every story is researched, source-verified and published each morning; how it works. General information only, not legal, regulatory or financial advice.