Topic Agency
CISA
The US Cybersecurity and Infrastructure Security Agency maintains the Known Exploited Vulnerabilities catalog and publishes guidance on phishing-resistant MFA.
Also called: Cybersecurity and Infrastructure Security Agency
- Parent
- US Department of Homeland Security
- Official site
- cisa.gov
Questions (4) #
- How many vulnerabilities are in the CISA KEV catalog?Vulnerabilities
CISA’s Known Exploited Vulnerabilities catalog lists 1,721 vulnerabilities as of catalog version 2026.09.23, released September 23, 2026.
- What does the due date in the CISA KEV catalog mean?Vulnerabilities
It is the date by which US federal civilian executive branch agencies must complete the entry’s required action, usually applying the vendor’s update or mitigation, or stop using the product.
- What is phishing-resistant MFA?Identity
Phishing-resistant MFA is authentication that a fake website or man-in-the-middle cannot capture and replay, because the credential is cryptographically bound to the real site.
- What is the CISA KEV catalog?Vulnerabilities
The Known Exploited Vulnerabilities (KEV) catalog is CISA’s list of vulnerabilities with reliable evidence of active exploitation.