Government ❯ Cybersecurity ❯ CISA

Known Exploited Vulnerabilities

Federal Agencies Federal Directives Federal Recommendations Advisories Binding Operational Directive 22-01 Federal Agencies Response CVE-2024-43468 Cisco Flaws High-Severity Vulnerability CVE-2026-25108

F5 BIG-IP APM Vulnerability Upgraded to Pre‑Auth RCE as Attacks Hit Live Systems

Confirmed in-the-wild attacks with newly published IOCs make rapid patching urgent.

CISA Lists F5 BIG-IP APM Flaw as Actively Exploited RCE, Sets March 30 Patch Deadline

CISA Flags Cisco Firewall Zero-Day Exploited by Interlock, Sets March 22 Patch Deadline

CISA Adds Actively Exploited Wing FTP Flaw to KEV With March 30 Fix Deadline

CISA Puts Actively Exploited n8n RCE on KEV, Orders Federal Patching by March 25

CISA Puts Exploited FileZen Bug on KEV With March 17 Fix Deadline

BeyondTrust Pre-Auth RCE Is Now Being Exploited in the Wild

CISA Adds HPE OneView, Microsoft Office Flaws to Exploited Vulnerabilities List

CISA Orders 7-Day Fix for New FortiWeb Zero-Day Exploited in the Wild

Palo Alto Networks Firewall Vulnerabilities Under Active Exploitation