CISA KEV
Actively exploited vulnerabilities — CISA KEV
Vulnerabilities of firewalls and security appliances that CISA lists as actively exploited, with their remediation due dates.
- 150
- tracked vulnerabilities
- 29
- with known ransomware use
- 1 Oct 2026 at 13:38 UTC
- Last synchronisation
of 260 in the catalog
About the CISA KEV catalog
CISA lists the CVEs with reliable evidence of exploitation in the wild. Each entry carries a required action and a due date that binds US federal agencies; for everyone else it is the clearest signal that a fix cannot wait.
Learn more
The Known Exploited Vulnerabilities catalog is maintained by the US Cybersecurity and Infrastructure Security Agency and updated as exploitation is confirmed. Being listed raises the priority of a fix; not being listed is never read as safe. Patcharo reads the feed at every synchronisation, keeps the due date and the ransomware flag exactly as CISA publishes them, and shows them next to the vendor's fixed releases so that the two questions, is it exploited and which release fixes it, are answered together.
KEV entries
1 entry
Newest additions first. Each entry keeps the CISA due date and the ransomware flag next to the fixed releases stated by the vendor.
- CVE-2026-50751KEVRansomwareCritical9.3CVSS 3.1, Critical6%
User Authentication Bypass in VPN Remote Access and Mobile Access
Check Point Quantum Security Gateway, Check Point Spark Firewalls
View the CVEAddedDuePassed