Back to Feed
VulnerabilitiesSep 25, 2026

Only 26% of Detected CISA Known Exploited Vulnerabilities Were Fully Remediated

Only 26% of CISA KEVs were fully remediated, making exploitation the top initial access vector.

Summary

A recent Verizon study revealed that exploiting known vulnerabilities has become the most common method for initial access in cyberattacks, accounting for 31% of incidents. Compounding this issue, a separate analysis found that a mere 26% of vulnerabilities listed on the CISA Known Exploited Vulnerabilities (KEV) catalog were fully remediated by organizations.