Skip to content

Added to CISA KEV

What a record said when it was published, what it says now, and the commit that changed it.

447 changes · newest first · grouped by dayCSVJSONRSS

SinceClear the filter
ChangedSourceRows
Counted changes of "Added to CISA KEV", newest first, one line per change to a CVE record, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.Record, Which record was edited, by its CVE id, or how many records one collapsed line stands on.Vendor · product, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.What changedDays to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Wed 13 Aug 2025· 1 change
2025-08-13CVE-2025-8875
N-ableN-Central
CISA KEV
fix due 2025-08-20Duration unknown
Tue 12 Aug 2025· 3 changes
2025-08-12CVE-2025-8088
RARLABWinRAR
CISA KEV
fix due 2025-09-02Duration unknown
2025-08-12CVE-2007-0671
MicrosoftOffice
CISA KEV
fix due 2025-09-02Duration unknown
2025-08-12CVE-2013-3893
MicrosoftInternet Explorer
CISA KEV
fix due 2025-09-02Duration unknown
Tue 5 Aug 2025· 3 changes
2025-08-05CVE-2020-25078
D-LinkDCS-2530L and DCS-2670L Devices
CISA KEV
fix due 2025-08-26Duration unknown
2025-08-05CVE-2020-25079
D-LinkDCS-2530L and DCS-2670L Devices
CISA KEV
fix due 2025-08-26Duration unknown
2025-08-05CVE-2022-40799
D-LinkDNR-322L
CISA KEV
fix due 2025-08-26Duration unknown
Mon 28 Jul 2025· 3 changes
2025-07-28CVE-2023-2533
PaperCutNG/MF
CISA KEV
fix due 2025-08-18Duration unknown
2025-07-28CVE-2025-20337
CiscoIdentity Services Engine
CISA KEV
fix due 2025-08-18Duration unknown
2025-07-28CVE-2025-20281
CiscoIdentity Services Engine
CISA KEV
fix due 2025-08-18Duration unknown
Tue 22 Jul 2025· 6 changes
2025-07-22CVE-2025-2775
SysAidSysAid On-Prem
CISA KEV
fix due 2025-08-12Duration unknown
2025-07-22CVE-2025-2776
SysAidSysAid On-Prem
CISA KEV
fix due 2025-08-12Duration unknown
2025-07-22CVE-2025-6558
GoogleChromium
CISA KEV
fix due 2025-08-12Duration unknown
2025-07-22CVE-2025-54309
CrushFTPCrushFTP
CISA KEV
fix due 2025-08-12Duration unknown
2025-07-22CVE-2025-49704
MicrosoftSharePoint
CISA KEV
fix due 2025-07-23Duration unknown
2025-07-22CVE-2025-49706
MicrosoftSharePoint
CISA KEV
fix due 2025-07-23Duration unknown
Mon 21 Jul 2025· 1 change
2025-07-21CVE-2025-53770
MicrosoftSharePoint
CISA KEV
fix due 2025-07-21 · listed 2025-07-20Duration unknown
Fri 18 Jul 2025· 1 change
2025-07-18CVE-2025-25257
FortinetFortiWeb
CISA KEV
fix due 2025-08-08Duration unknown
Mon 14 Jul 2025· 1 change
2025-07-14CVE-2025-47812
Wing FTP ServerWing FTP Server
CISA KEV
fix due 2025-08-04Duration unknown
Fri 11 Jul 2025· 1 change
2025-07-11CVE-2025-5777
CitrixNetScaler ADC and Gateway
CISA KEV
fix due 2025-07-11 · listed 2025-07-10Duration unknown
Mon 7 Jul 2025· 4 changes
2025-07-07CVE-2019-9621
SynacorZimbra Collaboration Suite (ZCS)
CISA KEV
fix due 2025-07-28Duration unknown
2025-07-07CVE-2019-5418
RailsRuby on Rails
CISA KEV
fix due 2025-07-28Duration unknown
2025-07-07CVE-2016-10033
PHPPHPMailer
CISA KEV
fix due 2025-07-28Duration unknown
2025-07-07CVE-2014-3931
Looking GlassMulti-Router Looking Glass (MRLG)
CISA KEV
fix due 2025-07-28Duration unknown
Wed 2 Jul 2025· 1 change
2025-07-02CVE-2025-6554
GoogleChromium V8
CISA KEV
fix due 2025-07-23Duration unknown
Tue 1 Jul 2025· 3 changes
2025-07-01CVE-2025-48928
TeleMessageTM SGNL
CISA KEV
fix due 2025-07-22Duration unknown
2025-07-01CVE-2025-48927
TeleMessageTM SGNL
CISA KEV
fix due 2025-07-22Duration unknown
2025-07-01CVE-2025-6543
CitrixNetScaler ADC and Gateway
CISA KEV
fix due 2025-07-21 · listed 2025-06-30Duration unknown
Wed 25 Jun 2025· 3 changes
2025-06-25CVE-2019-6693
FortinetFortiOS
CISA KEV
fix due 2025-07-16Duration unknown
2025-06-25CVE-2024-0769
D-LinkDIR-859 Router
CISA KEV
fix due 2025-07-16Duration unknown
2025-06-25CVE-2024-54085
AMIMegaRAC SPx
CISA KEV
fix due 2025-07-16Duration unknown
Tue 17 Jun 2025· 1 change
2025-06-17CVE-2023-0386
LinuxKernel
CISA KEV
fix due 2025-07-08Duration unknown
Mon 16 Jun 2025· 2 changes
2025-06-16CVE-2023-33538
TP-LinkMultiple Routers
CISA KEV
fix due 2025-07-07Duration unknown
2025-06-16CVE-2025-43200
AppleMultiple Products
CISA KEV
fix due 2025-07-07Duration unknown
Tue 10 Jun 2025· 2 changes
2025-06-10CVE-2025-33053
Web Distributed Authoring and VersioningWeb Distributed Authoring and Versioning (WebDAV)
CISA KEV
fix due 2025-07-01Duration unknown
2025-06-10CVE-2025-24016
WazuhWazuh Server
CISA KEV
fix due 2025-07-01Duration unknown
Mon 9 Jun 2025· 11 changes
2025-06-09CVE-2024-42009
RoundcubeWebmail
CISA KEV
fix due 2025-06-30Duration unknown
2025-06-09CVE-2025-32433
ErlangErlang/OTP
CISA KEV
fix due 2025-06-30Duration unknown
2025-06-09CVE-2025-5419
GoogleChromium V8
CISA KEV
fix due 2025-06-26 · listed 2025-06-05Duration unknown
2025-06-09CVE-2025-21479
QualcommMultiple Chipsets
CISA KEV
fix due 2025-06-24 · listed 2025-06-03Duration unknown
2025-06-09CVE-2025-21480
QualcommMultiple Chipsets
CISA KEV
fix due 2025-06-24 · listed 2025-06-03Duration unknown
2025-06-09CVE-2025-27038
QualcommMultiple Chipsets
CISA KEV
fix due 2025-06-24 · listed 2025-06-03Duration unknown
2025-06-09CVE-2021-32030
ASUSRouters
CISA KEV
fix due 2025-06-23 · listed 2025-06-02Duration unknown
2025-06-09CVE-2025-3935
ConnectWiseScreenConnect
CISA KEV
fix due 2025-06-23 · listed 2025-06-02Duration unknown
2025-06-09CVE-2025-35939
Craft CMSCraft CMS
CISA KEV
fix due 2025-06-23 · listed 2025-06-02Duration unknown
2025-06-09CVE-2024-56145
Craft CMSCraft CMS
CISA KEV
fix due 2025-06-23 · listed 2025-06-02Duration unknown
2025-06-09CVE-2023-39780
ASUSRT-AX55 Routers
CISA KEV
fix due 2025-06-23 · listed 2025-06-02Duration unknown
Thu 22 May 2025· 1 change
2025-05-22CVE-2025-4632
SamsungMagicINFO 9 Server
CISA KEV
fix due 2025-06-12Duration unknown
Mon 19 May 2025· 6 changes
2025-05-19CVE-2023-38950
ZKTecoBioTime
CISA KEV
fix due 2025-06-09Duration unknown
2025-05-19CVE-2024-27443
SynacorZimbra Collaboration Suite (ZCS)
CISA KEV
fix due 2025-06-09Duration unknown
2025-05-19CVE-2025-27920
SrimaxOutput Messenger
CISA KEV
fix due 2025-06-09Duration unknown
2025-05-19CVE-2024-11182
MDaemonEmail Server
CISA KEV
fix due 2025-06-09Duration unknown
2025-05-19CVE-2025-4428
IvantiEndpoint Manager Mobile (EPMM)
CISA KEV
fix due 2025-06-09Duration unknown
2025-05-19CVE-2025-4427
IvantiEndpoint Manager Mobile (EPMM)
CISA KEV
fix due 2025-06-09Duration unknown
Thu 15 May 2025· 3 changes
2025-05-15CVE-2025-42999
SAPNetWeaver
CISA KEV
fix due 2025-06-05Duration unknown
2025-05-15CVE-2024-12987
DrayTekVigor Routers
CISA KEV
fix due 2025-06-05Duration unknown
2025-05-15CVE-2025-4664
GoogleChromium
CISA KEV
fix due 2025-06-05Duration unknown
Wed 14 May 2025· 1 change
2025-05-14CVE-2025-32756
FortinetMultiple Products
CISA KEV
fix due 2025-06-04Duration unknown
Tue 13 May 2025· 5 changes
2025-05-13CVE-2025-32709
MicrosoftWindows
CISA KEV
fix due 2025-06-03Duration unknown
2025-05-13CVE-2025-30397
MicrosoftWindows
CISA KEV
fix due 2025-06-03Duration unknown
2025-05-13CVE-2025-32706
MicrosoftWindows
CISA KEV
fix due 2025-06-03Duration unknown
2025-05-13CVE-2025-32701
MicrosoftWindows
CISA KEV
fix due 2025-06-03Duration unknown
2025-05-13CVE-2025-30400
MicrosoftWindows
CISA KEV
fix due 2025-06-03Duration unknown
Mon 12 May 2025· 1 change
2025-05-12CVE-2025-47729
TeleMessageTM SGNL
CISA KEV
fix due 2025-06-02Duration unknown
Wed 7 May 2025· 2 changes
2025-05-07CVE-2024-11120
GeoVisionMultiple Devices
CISA KEV
fix due 2025-05-28Duration unknown
2025-05-07CVE-2024-6047
GeoVisionMultiple Devices
CISA KEV
fix due 2025-05-28Duration unknown
Tue 6 May 2025· 1 change
2025-05-06CVE-2025-27363
FreeTypeFreeType
CISA KEV
fix due 2025-05-27Duration unknown
Mon 5 May 2025· 1 change
2025-05-05CVE-2025-3248
LangflowLangflow
CISA KEV
fix due 2025-05-26Duration unknown
Fri 2 May 2025· 4 changes
2025-05-02CVE-2025-34028
CommvaultCommand Center
CISA KEV
fix due 2025-05-23Duration unknown
2025-05-02CVE-2024-58136CISA KEVfix due 2025-05-23Duration unknown
2025-05-02CVE-2024-38475
ApacheHTTP Server
CISA KEV
fix due 2025-05-22 · listed 2025-05-01Duration unknown
2025-05-02CVE-2023-44221
SonicWallSMA100 Appliances
CISA KEV
fix due 2025-05-22 · listed 2025-05-01Duration unknown
Tue 29 Apr 2025· 4 changes
2025-04-29CVE-2025-31324
SAPNetWeaver
CISA KEV
fix due 2025-05-20Duration unknown
2025-04-29CVE-2025-1976
BroadcomBrocade Fabric OS
CISA KEV
fix due 2025-05-19 · listed 2025-04-28Duration unknown
2025-04-29CVE-2025-42599
QualitiaActive! Mail
CISA KEV
fix due 2025-05-19 · listed 2025-04-28Duration unknown
2025-04-29CVE-2025-3928
CommvaultWeb Server
CISA KEV
fix due 2025-05-17 · listed 2025-04-28Duration unknown
Thu 17 Apr 2025· 3 changes
2025-04-17CVE-2025-24054
MicrosoftWindows
CISA KEV
fix due 2025-05-08Duration unknown
2025-04-17CVE-2025-31201
AppleMultiple Products
CISA KEV
fix due 2025-05-08Duration unknown
2025-04-17CVE-2025-31200
AppleMultiple Products
CISA KEV
fix due 2025-05-08Duration unknown
Wed 16 Apr 2025· 1 change
2025-04-16CVE-2021-20035
SonicWallSMA100 Appliances
CISA KEV
fix due 2025-05-07Duration unknown
Wed 9 Apr 2025· 2 changes
2025-04-09CVE-2024-53150
LinuxKernel
CISA KEV
fix due 2025-04-30Duration unknown
2025-04-09CVE-2024-53197
LinuxKernel
CISA KEV
fix due 2025-04-30Duration unknown
Tue 8 Apr 2025· 2 changes
2025-04-08CVE-2025-29824
MicrosoftWindows
CISA KEV
fix due 2025-04-29Duration unknown
2025-04-08CVE-2025-30406
GladinetCentreStack
CISA KEV
fix due 2025-04-29Duration unknown
Mon 7 Apr 2025· 1 change
2025-04-07CVE-2025-31161
CrushFTPCrushFTP
CISA KEV
fix due 2025-04-28Duration unknown
Fri 4 Apr 2025· 1 change
2025-04-04CVE-2025-22457
IvantiConnect Secure, Policy Secure and ZTA Gateways
CISA KEV
fix due 2025-04-11Duration unknown
Tue 1 Apr 2025· 1 change
2025-04-01CVE-2025-24813
ApacheTomcat
CISA KEV
fix due 2025-04-22Duration unknown
Mon 31 Mar 2025· 1 change
2025-03-31CVE-2024-20439
CiscoSmart Licensing Utility
CISA KEV
fix due 2025-04-21Duration unknown
Thu 27 Mar 2025· 3 changes
2025-03-27CVE-2025-2783
GoogleChromium Mojo
CISA KEV
fix due 2025-04-17Duration unknown
2025-03-27CVE-2019-9875
SitecoreCMS and Experience Platform (XP)
CISA KEV
fix due 2025-04-16 · listed 2025-03-26Duration unknown
2025-03-27CVE-2019-9874
SitecoreCMS and Experience Platform (XP)
CISA KEV
fix due 2025-04-16 · listed 2025-03-26Duration unknown
Mon 24 Mar 2025· 1 change
2025-03-24CVE-2025-30154
reviewdogaction-setup GitHub Action
CISA KEV
fix due 2025-04-14Duration unknown
Wed 19 Mar 2025· 3 changes
2025-03-19CVE-2017-12637
SAPNetWeaver
CISA KEV
fix due 2025-04-09Duration unknown
2025-03-19CVE-2024-48248
NAKIVOBackup and Replication
CISA KEV
fix due 2025-04-09Duration unknown
2025-03-19CVE-2025-1316
EdimaxIC-7100 IP Camera
CISA KEV
fix due 2025-04-09Duration unknown
Tue 18 Mar 2025· 2 changes
2025-03-18CVE-2025-30066
tj-actionschanged-files GitHub Action
CISA KEV
fix due 2025-04-08Duration unknown
2025-03-18CVE-2025-24472
FortinetFortiOS and FortiProxy
CISA KEV
fix due 2025-04-08Duration unknown
Thu 13 Mar 2025· 2 changes
2025-03-13CVE-2025-21590
JuniperJunos OS
CISA KEV
fix due 2025-04-03Duration unknown
2025-03-13CVE-2025-24201
AppleMultiple Products
CISA KEV
fix due 2025-04-03Duration unknown
Tue 11 Mar 2025· 1 change
2025-03-11CVE-2025-24993
MicrosoftWindows
CISA KEV
fix due 2025-04-01Duration unknown

This kind is counted once per CVE record, so changes and records are the same number here.

What this page cannot see

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Paste your closed CVE tickets and see which of these changes hit them →