Government ❯ Cybersecurity ❯ CISA

Vulnerability Management

Known Exploited Vulnerabilities Federal Agencies Federal Directives Incident Response Public Safety Federal Civilian Executive Branch KEV Catalog Known Exploited Vulnerabilities (KEV) Patch Management CVE-2025-58360

CISA Adds Zyxel Switch Bug to KEV as Veeam Agent Privilege Flaw Is Publicly Exploited

Federal agencies must install Zyxel’s patched firmware by Sept. 24 to close a bug CISA says is being actively abused.

CISA Orders Rapid Patch of Three Actively Exploited Linux Kernel Flaws

CISA Adds Actively Exploited Oracle WebLogic and Citrix NetScaler Flaws to KEV and Orders Rapid Federal Patching

CISA Flags Active Exploitation of Critical Gitea RCE

CISA Orders Rapid Fixes After Active Exploitation of Critical MLflow SSRF

Qilin Ransomware Exploits Palo Alto GlobalProtect Authentication Bypass

CISA Orders Federal Patch for Actively Exploited Fortinet FortiSandbox Flaws

Zimbra Patches Critical Classic Web Client XSS

CISA Adds Microsoft SharePoint RCE to Known Exploited List and Orders Rapid Federal Patching

CISA Adds Ubiquiti and Lantronix Flaws to Known Exploited Vulnerabilities Catalog

Critical Splunk Enterprise Flaw Is Being Exploited; CISA Orders Federal Fix by Sunday

CISA Orders Immediate Fixes for Actively Exploited LiteSpeed and Joomla Plugin Flaws

CISA Says SolarWinds Serv-U Flaw Is Being Exploited to Crash Servers

CISA Adds Exploited Mirasvit Magento Flaw to KEV After Active RCE Attacks

CISA Flags Two-Year-Old Oracle WebLogic Flaw as Actively Exploited

Active Exploits Hit Drupal SQL Injection Flaw CVE-2026-9082

CISA Orders Rapid Patching of Cisco SD‑WAN Admin‑Bypass Flaw CVE‑2026‑20182

CISA Adds ActiveMQ RCE to KEV With April 30 Patch Deadline

Google Rushes Chrome 146 Update to Fix WebGPU Zero-Day Exploited in the Wild

CISA Adds Actively Exploited Langflow RCE to KEV, Sets April 8 Deadline