Government ❯ Cybersecurity ❯ CISA

Known Exploited Vulnerabilities

Federal Agencies Federal Directives Federal Recommendations Advisories Binding Operational Directive 22-01 Federal Agencies Response Incident Response CVE-2024-43468 CVE-2026-20131 High-Severity Vulnerability Cisco Flaws CVE-2026-25108 Federal Agency Response Wing FTP Federal Civilian Executive Branch Mitigation Strategies Vulnerability Management Federal Agency Guidelines

Google Patches Actively Exploited V8 Zero-Day in Chrome Update

CISA’s addition of the flaw to its Known Exploited Vulnerabilities catalog requires federal agencies to remediate by September 18, 2026.

PaperCut Zero-Days Escalate to Active Intrusions

CISA Flags Active Exploitation of Critical Gitea RCE

CISA Orders Rapid Patching of Cisco SD‑WAN Admin‑Bypass Flaw CVE‑2026‑20182

Ivanti Patches EPMM Zero‑Day Under Active Exploitation as CISA Orders Fix by May 10

F5 Reclassifies BIG-IP APM Bug as Critical RCE as In‑the‑Wild Attacks Unfold

CISA Lists F5 BIG-IP APM Flaw as Actively Exploited RCE, Sets March 30 Patch Deadline

CISA Flags Cisco Firewall Zero-Day Exploited by Interlock, Sets March 22 Patch Deadline

CISA Adds Actively Exploited Wing FTP Flaw to KEV With March 30 Fix Deadline

CISA Puts Actively Exploited n8n RCE on KEV, Orders Federal Patching by March 25

CISA Puts Exploited FileZen Bug on KEV With March 17 Fix Deadline

BeyondTrust Pre-Auth RCE Is Now Being Exploited in the Wild

CISA Adds HPE OneView, Microsoft Office Flaws to Exploited Vulnerabilities List

CISA Orders 7-Day Fix for New FortiWeb Zero-Day Exploited in the Wild