All feeds
CISA · Updated within hours of CISA publication
CISA Known Exploited Vulnerabilities
The vulnerabilities US federal agencies must patch — and you should too.
The CISA KEV catalog is the most actionable vulnerability feed in the industry. If a CVE is on KEV, it's being exploited in the real world right now. We mirror it the moment CISA updates, then enrich each entry with affected products, MITRE ATT&CK technique mappings, and which of your stack components match.
Records
CVEs with confirmed in-the-wild exploitation
Refresh cadence
Updated within hours of CISA publication
Source
CISA
License
Public domain · CISA
