Government ❯ Cybersecurity Policy ❯ CISA

Vulnerability Management

Binding Operational Directive 22-01 Binding Operational Directive Federal Directives Known Exploited Vulnerabilities Federal Agencies Federal Agencies Compliance Known Exploited Vulnerabilities Catalog Federal Response

7 ARTICLES

last mo.

Critical GitLab Path Traversal Now Being Actively Exploited

It lets unauthenticated attackers read arbitrary files such as SSH keys and CI/CD secrets, creating an urgent need for patches, log hunts and credential rotation.

6 ARTICLES

3mo ago

Cisco Says Zero‑Day Static‑Credential Flaw in Firewall Manager Is Being Exploited

3 ARTICLES

5mo ago

CISA Adds LiteLLM Command‑Injection Flaw to Known Exploited Vulnerabilities List

7 ARTICLES

5mo ago

CISA Puts Actively Exploited n8n RCE on KEV, Orders Federal Patching by March 25

7 ARTICLES

9mo ago

Ivanti EPMM Zero-Day RCE Flaws Exploited as CISA Orders Rapid Mitigation

6 ARTICLES

10mo ago

CISA Puts Actively Exploited Gogs RCE on KEV, Orders Federal Fix by Feb. 2

3 ARTICLES

11mo ago

CISA Adds Oracle Identity Manager RCE to KEV, Citing Active Exploitation and Setting Dec. 12 Deadline

4 ARTICLES

11mo ago

CISA Orders 7-Day Fix for New FortiWeb Zero-Day Exploited in the Wild

3 ARTICLES

last yr.

CISA Adds VMware Aria Operations/Tools Flaw to KEV, Sets Nov. 20 Patch Deadline for Feds

4 ARTICLES

last yr.

CISA Adds Two Actively Exploited DELMIA Apriso Flaws to KEV

4 ARTICLES

last yr.

CISA Adds Actively Exploited Adobe AEM Forms Flaw to KEV Catalog

6 ARTICLES

last yr.

CISA Adds Exploited Git and Citrix Flaws to KEV, Orders Fixes by Sept. 15

Vulnerability Management

Critical GitLab Path Traversal Now Being Actively Exploited

Cisco Says Zero‑Day Static‑Credential Flaw in Firewall Manager Is Being Exploited

CISA Adds LiteLLM Command‑Injection Flaw to Known Exploited Vulnerabilities List

Critical Check Point VPN Flaw Exploited by Ransomware-Linked Attackers

CISA Adds ActiveMQ RCE to KEV With April 30 Patch Deadline

CISA Adds Actively Exploited Wing FTP Flaw to KEV With March 30 Fix Deadline

CISA Puts Actively Exploited n8n RCE on KEV, Orders Federal Patching by March 25

Ivanti EPMM Zero-Day RCE Flaws Exploited as CISA Orders Rapid Mitigation

CISA Puts Actively Exploited Gogs RCE on KEV, Orders Federal Fix by Feb. 2

CISA Adds Oracle Identity Manager RCE to KEV, Citing Active Exploitation and Setting Dec. 12 Deadline

CISA Orders 7-Day Fix for New FortiWeb Zero-Day Exploited in the Wild

CISA Adds VMware Aria Operations/Tools Flaw to KEV, Sets Nov. 20 Patch Deadline for Feds

CISA Adds Two Actively Exploited DELMIA Apriso Flaws to KEV

CISA Adds Actively Exploited Adobe AEM Forms Flaw to KEV Catalog

CISA Adds Exploited Git and Citrix Flaws to KEV, Orders Fixes by Sept. 15

Never miss stories about

Vulnerability Management