Skip to main content

CISA KEV catalog

Every exploited CVE, in one place

These are the vulnerabilities CISA has confirmed attackers are using: 1,766 of them. Open any one for its EPSS exploit score, CVSS severity, CISA’s deadline and the vendor’s fix. If a scan finds one of these on your network, fix it first.

New to this? What CISA KEV is and how to use it. Got a CVE that isn’t listed? Check any CVE.

Newest additions

Source: CISA Known Exploited Vulnerabilities catalog (version 2026.10.30), refreshed several times a day.

Cookie preferences

Essential site functions remain available whichever option you choose. Your advertising choice is saved on this site. The Scan Hub has a separate choice.

Google and Reddit may receive cookies, identifiers, browser and device information, and your network/IP information. Reject or withdraw at any time. Read the Privacy Policy.