Cleartext

Topic Dataset

CISA KEV catalog

CISA's catalog of vulnerabilities with evidence of active exploitation, each with a required action and a remediation due date.

Also called: KEV, Known Exploited Vulnerabilities, BOD 22-01, BOD 26-04

Official site
cisa.gov

Questions (4) #

  • How many vulnerabilities are in the CISA KEV catalog?Vulnerabilities

    CISA’s Known Exploited Vulnerabilities catalog lists 1,721 vulnerabilities as of catalog version 2026.09.23, released September 23, 2026.

    Verified · Rev. 1

  • What does the due date in the CISA KEV catalog mean?Vulnerabilities

    It is the date by which US federal civilian executive branch agencies must complete the entry’s required action, usually applying the vendor’s update or mitigation, or stop using the product.

    Verified · Rev. 1

  • What is the CISA KEV catalog?Vulnerabilities

    The Known Exploited Vulnerabilities (KEV) catalog is CISA’s list of vulnerabilities with reliable evidence of active exploitation.

    Verified · Rev. 1

  • Which vendors have the most CISA KEV entries?Vulnerabilities

    Microsoft has the most entries in CISA’s Known Exploited Vulnerabilities catalog, with 388 of 1,721 (22.5%), followed by Cisco (99) and Apple (94), as of catalog 2026.09.23.

    Verified · Rev. 1

Checklists (1) #

ChecklistHow to patch a CISA KEV entry

Glossary #

CVE
Common Vulnerabilities and Exposures: the public naming scheme that gives each disclosed vulnerability an identifier such as CVE-2026-12345. CISA only adds vulnerabilities with a CVE ID to its KEV catalog.
Known Exploited Vulnerabilities (KEV)
CISA's catalog of vulnerabilities that have reliable evidence of active exploitation. Each entry names a required action and a due date by which US federal civilian agencies must act.

Reference data #

Latest KEV-listed CVEs: 1,721 entries in catalog 2026.09.23.