[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:cisa\u002Fkev":3},{"item":4,"lessons":16,"controls":67,"related":98},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"cisa","kev","KEV","Known Exploited Vulnerabilities (KEV) Catalog",268,"US Cybersecurity and Infrastructure Security Agency (CISA)","**What it asks for.** The KEV catalogue is a list maintained by the US Cybersecurity and Infrastructure Security Agency of vulnerabilities with reliable evidence of active exploitation and a clear remediation action. Each entry includes the CVE identifier, affected product, required action and a due date that applies to US federal civilian agencies under BOD 22-01.\n\n**In practice.** Although binding only on US federal agencies, many organisations worldwide use KEV as a prioritisation input. In practice, vulnerability management tooling flags KEV listed issues automatically and remediation targets for them are shorter than for other findings. Evidence includes patching metrics for KEV entries, exception records and asset inventories complete enough to know where affected products run.\n\n**Common gaps.** KEV is sometimes treated as the only list that matters, although it covers only a small fraction of exploited issues. Incomplete asset inventories mean affected systems are missed.",null,"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog","Open the KEV catalog","2026-10-18T15:18:43.663+00:00",{"total":17,"list":18},262,[19,23,27,31,35,39,43,47,51,55,59,63],{"slug":20,"title":21,"published_at":22},"critical-beyondtrust-auth-bypass-actively-exploited-patch-immediately","Critical BeyondTrust Auth Bypass Actively Exploited — Patch Immediately","2026-10-16T22:21:05.267+00:00",{"slug":24,"title":25,"published_at":26},"beyondtrust-zero-day-highlights-critical-risk-of-unpatched-edge-devices","BeyondTrust Zero-Day Highlights Critical Risk of Unpatched Edge Devices","2026-10-16T22:20:18.59+00:00",{"slug":28,"title":29,"published_at":30},"active-exploitation-of-fortinet-and-beyondtrust-flaws-highlights-patch-urgency","Active Exploitation of Fortinet and BeyondTrust Flaws Highlights Patch Urgency","2026-10-16T20:21:00.599+00:00",{"slug":32,"title":33,"published_at":34},"beyondtrust-zero-day-exploited-for-months-before-patch","BeyondTrust Zero-Day Exploited for Months Before Patch","2026-10-16T08:21:15.847+00:00",{"slug":36,"title":37,"published_at":38},"actively-exploited-atlassian-vulnerability-added-to-cisa-kev-catalog","Actively Exploited Atlassian Vulnerability Added to CISA KEV Catalog","2026-10-15T20:21:37.943+00:00",{"slug":40,"title":41,"published_at":42},"pan-os-zero-day-enables-root-level-rce-on-firewalls","PAN-OS Zero-Day Enables Root-Level RCE on Firewalls","2026-10-15T08:20:33.588+00:00",{"slug":44,"title":45,"published_at":46},"cisa-flags-four-actively-exploited-vulnerabilities-requiring-immediate-patching","CISA Flags Four Actively Exploited Vulnerabilities Requiring Immediate Patching","2026-10-14T22:21:22.354+00:00",{"slug":48,"title":49,"published_at":50},"record-1413-microsoft-vulnerabilities-highlight-patch-prioritization-crisis","Record 1,413 Microsoft Vulnerabilities Highlight Patch Prioritization Crisis","2026-10-14T18:21:00.409+00:00",{"slug":52,"title":53,"published_at":54},"record-breaking-patch-tuesday-highlights-danger-of-delayed-patching","Record-Breaking Patch Tuesday Highlights Danger of Delayed Patching","2026-10-14T10:20:35.027+00:00",{"slug":56,"title":57,"published_at":58},"record-1413-microsoft-vulnerabilities-patched-including-actively-exploited-zero-day","Record 1,413 Microsoft Vulnerabilities Patched, Including Actively Exploited Zero-Day","2026-10-14T08:20:44.178+00:00",{"slug":60,"title":61,"published_at":62},"ivantis-delayed-patch-allowed-zero-day-exploit-chain-to-emerge","Ivanti's Delayed Patch Allowed Zero-Day Exploit Chain to Emerge","2026-10-14T00:21:33.929+00:00",{"slug":64,"title":65,"published_at":66},"microsofts-record-1400-patch-release-strains-security-teams","Microsoft's Record 1,400+ Patch Release Strains Security Teams","2026-10-14T00:20:18.008+00:00",[68,73,78,83,88,93],{"slug":69,"name":70,"problem":71,"stories":72},"patch-management","Automated patch management","Known holes get closed in days, not months.",241,{"slug":74,"name":75,"problem":76,"stories":77},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",218,{"slug":79,"name":80,"problem":81,"stories":82},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",65,{"slug":84,"name":85,"problem":86,"stories":87},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",56,{"slug":89,"name":90,"problem":91,"stories":92},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",33,{"slug":94,"name":95,"problem":96,"stories":97},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",18,[99,105,111,116,121,127,132,138],{"family":100,"item":101,"code":102,"title":103,"together":104},"cis","7","Control 7","Continuous Vulnerability Management",261,{"family":106,"item":107,"code":108,"title":109,"together":110},"nist-800-53","si-2","SI-2","Flaw Remediation",233,{"family":112,"item":113,"code":114,"title":114,"together":115},"itil","overview","ITIL",204,{"family":100,"item":117,"code":118,"title":119,"together":120},"12","Control 12","Network Infrastructure Management",192,{"family":122,"item":123,"code":124,"title":125,"together":126},"nist-sp","800-40","SP 800-40","SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology",181,{"family":106,"item":128,"code":129,"title":130,"together":131},"ra-5","RA-5","Vulnerability Monitoring and Scanning",157,{"family":133,"item":134,"code":135,"title":136,"together":137},"nist-csf","id-ra","ID.RA-1","Risk Assessment",79,{"family":106,"item":139,"code":140,"title":141,"together":142},"sc-7","SC-7","Boundary Protection",72]