Every change, newest first
| Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin. | Kind | Record, Which record was edited, by its CVE id, or how many records one collapsed line stands on. | Vendor · product, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry. | What changed | Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong. |
|---|---|---|---|---|---|
| Mon 9 Mar 2026· 2 record changes | |||||
| 2026-03-09 | Added to CISA KEV | CVE-2025-26399 | SolarWindsWeb Help Desk CISA KEV | fix due 2026-03-12 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-03-09 | Added to CISA KEV | CVE-2026-1603 | Ivanti Endpoint Manager (EPM) CISA KEV | fix due 2026-03-23 | Not applicable: Added to CISA KEV has no earlier value |
| Thu 5 Mar 2026· 5 record changes | |||||
| 2026-03-05 | Added to CISA KEV | CVE-2017-7921 | HikvisionMultiple Products CISA KEV | fix due 2026-03-26 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-03-05 | Added to CISA KEV | CVE-2021-22681 | RockwellMultiple Products CISA KEV | fix due 2026-03-26 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-03-05 | Added to CISA KEV | CVE-2023-43000 | AppleMultiple Products CISA KEV | fix due 2026-03-26 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-03-05 | Added to CISA KEV | CVE-2021-30952 | AppleMultiple Products CISA KEV | fix due 2026-03-26 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-03-05 | Added to CISA KEV | CVE-2023-41974 | AppleiOS and iPadOS CISA KEV | fix due 2026-03-26 | Not applicable: Added to CISA KEV has no earlier value |
| Tue 3 Mar 2026· 2 record changes | |||||
| 2026-03-03 | Added to CISA KEV | CVE-2026-22719 | BroadcomVMware Aria Operations CISA KEV | fix due 2026-03-24 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-03-03 | Added to CISA KEV | CVE-2026-21385 | QualcommMultiple Chipsets CISA KEV | fix due 2026-03-24 | Not applicable: Added to CISA KEV has no earlier value |
| Thu 26 Feb 2026· 1 record change | |||||
| 2026-02-26 | Ransomware use confirmed | CVE-2026-23760 | SmarterToolsSmarterMail CISA KEV | stated at publication Unknown, now states Known | Days to revision 31 |
| Wed 25 Feb 2026· 2 record changes | |||||
| 2026-02-25 | Added to CISA KEV | CVE-2022-20775 | CiscoSD-WAN CISA KEV | fix due 2026-02-27 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-02-25 | Added to CISA KEV | CVE-2026-20127 | CiscoCatalyst SD-WAN Controller and Manager CISA KEV | fix due 2026-02-27 | Not applicable: Added to CISA KEV has no earlier value |
| Tue 24 Feb 2026· 1 record change | |||||
| 2026-02-24 | Added to CISA KEV | CVE-2026-25108 | Soliton Systems K.KFileZen CISA KEV | fix due 2026-03-17 | Not applicable: Added to CISA KEV has no earlier value |
| Fri 20 Feb 2026· 2 record changes | |||||
| 2026-02-20 | Added to CISA KEV | CVE-2025-49113 | RoundcubeWebmail CISA KEV | fix due 2026-03-13 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-02-20 | Added to CISA KEV | CVE-2025-68461 | RoundcubeWebmail CISA KEV | fix due 2026-03-13 | Not applicable: Added to CISA KEV has no earlier value |
| Thu 19 Feb 2026· 1 record change | |||||
| 2026-02-19 | Ransomware use confirmed | CVE-2026-1731 | BeyondTrustRemote Support (RS) and Privileged Remote Access (PRA) CISA KEV | stated at publication Unknown, now states Known | Days to revision 6 |
| Wed 18 Feb 2026· 2 record changes | |||||
| 2026-02-18 | Added to CISA KEV | CVE-2021-22175 | GitLabGitLab CISA KEV | fix due 2026-03-11 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-02-18 | Added to CISA KEV | CVE-2026-22769 | DellRecoverPoint for Virtual Machines (RP4VMs) CISA KEV | fix due 2026-02-21 | Not applicable: Added to CISA KEV has no earlier value |
| Tue 17 Feb 2026· 4 record changes | |||||
| 2026-02-17 | Added to CISA KEV | CVE-2020-7796 | SynacorZimbra Collaboration Suite CISA KEV | fix due 2026-03-10 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-02-17 | Added to CISA KEV | CVE-2024-7694 | TeamT5ThreatSonar Anti-Ransomware CISA KEV | fix due 2026-03-10 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-02-17 | Added to CISA KEV | CVE-2008-0015 | MicrosoftWindows CISA KEV | fix due 2026-03-10 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-02-17 | Added to CISA KEV | CVE-2026-2441 | GoogleChromium CISA KEV | fix due 2026-03-10 | Not applicable: Added to CISA KEV has no earlier value |
| Sat 14 Feb 2026· 1 record change | |||||
| 2026-02-14 | Added to CISA KEV | CVE-2026-1731 | BeyondTrustRemote Support (RS) and Privileged Remote Access (PRA) CISA KEV | fix due 2026-02-16 · listed 2026-02-13 | Not applicable: Added to CISA KEV has no earlier value |
| Thu 12 Feb 2026· 4 record changes | |||||
| 2026-02-12 | Added to CISA KEV | CVE-2025-40536 | SolarWindsWeb Help Desk CISA KEV | fix due 2026-02-15 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-02-12 | Added to CISA KEV | CVE-2026-20700 | AppleMultiple Products CISA KEV | fix due 2026-03-05 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-02-12 | Added to CISA KEV | CVE-2024-43468 | MicrosoftConfiguration Manager CISA KEV | fix due 2026-03-05 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-02-12 | Added to CISA KEV | CVE-2025-15556 | Notepad++Notepad++ CISA KEV | fix due 2026-03-05 | Not applicable: Added to CISA KEV has no earlier value |
| Tue 10 Feb 2026· 6 record changes | |||||
| 2026-02-10 | Added to CISA KEV | CVE-2026-21513 | MicrosoftWindows CISA KEV | fix due 2026-03-03 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-02-10 | Added to CISA KEV | CVE-2026-21525 | MicrosoftWindows CISA KEV | fix due 2026-03-03 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-02-10 | Added to CISA KEV | CVE-2026-21510 | MicrosoftWindows CISA KEV | fix due 2026-03-03 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-02-10 | Added to CISA KEV | CVE-2026-21533 | MicrosoftWindows CISA KEV | fix due 2026-03-03 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-02-10 | Added to CISA KEV | CVE-2026-21519 | MicrosoftWindows CISA KEV | fix due 2026-03-03 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-02-10 | Added to CISA KEV | CVE-2026-21514 | MicrosoftOffice CISA KEV | fix due 2026-03-03 | Not applicable: Added to CISA KEV has no earlier value |
| Thu 5 Feb 2026· 3 record changes | |||||
| 2026-02-05 | Added to CISA KEV | CVE-2025-11953 | CISA KEV | fix due 2026-02-26 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-02-05 | Added to CISA KEV | CVE-2026-24423 | SmarterToolsSmarterMail CISA KEV | fix due 2026-02-26 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-02-05 | Ransomware use confirmed | CVE-2026-24423 | SmarterToolsSmarterMail CISA KEV | stated at publication Unknown, now states Known | Days to revision 0 |
| Wed 4 Feb 2026· 1 record change | |||||
| 2026-02-04 | Ransomware use confirmed | CVE-2025-22225 | VMwareESXi CISA KEV | stated at publication Unknown, now states Known | Days to revision 337 |
| Tue 3 Feb 2026· 4 record changes | |||||
| 2026-02-03 | Added to CISA KEV | CVE-2025-40551 | SolarWindsWeb Help Desk CISA KEV | fix due 2026-02-06 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-02-03 | Added to CISA KEV | CVE-2021-39935 | GitLabCommunity and Enterprise Editions CISA KEV | fix due 2026-02-24 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-02-03 | Added to CISA KEV | CVE-2025-64328 | SangomaFreePBX CISA KEV | fix due 2026-02-24 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-02-03 | Added to CISA KEV | CVE-2019-19006 | SangomaFreePBX CISA KEV | fix due 2026-02-24 | Not applicable: Added to CISA KEV has no earlier value |
| Thu 29 Jan 2026· 6 record changes | |||||
| 2026-01-29 | Added to CISA KEV | CVE-2026-1281 | IvantiEndpoint Manager Mobile (EPMM) CISA KEV | fix due 2026-02-01 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-01-29 | Added to CISA KEV | CVE-2026-1281 | IvantiEndpoint Manager Mobile (EPMM) CISA KEV | fix due 2026-02-01 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-01-29 | Ransomware use confirmed | CVE-2024-49039 | MicrosoftWindows CISA KEV | stated at publication Unknown, now states Known | Days to revision at least 337 |
| 2026-01-29 | Ransomware use confirmed | CVE-2024-51567 | CyberPersonsCyberPanel CISA KEV | stated at publication Unknown, now states Known | Days to revision at least 337 |
| 2026-01-29 | Ransomware use confirmed | CVE-2024-9680 | MozillaFirefox CISA KEV | stated at publication Unknown, now states Known | Days to revision at least 337 |
| 2026-01-29 | Ransomware use confirmed | CVE-2024-30088 | MicrosoftWindows CISA KEV | stated at publication Unknown, now states Known | Days to revision at least 337 |
| Tue 27 Jan 2026· 1 record change | |||||
| 2026-01-27 | Added to CISA KEV | CVE-2026-24858 | FortinetMultiple Products CISA KEV | fix due 2026-01-30 | Not applicable: Added to CISA KEV has no earlier value |
| Mon 26 Jan 2026· 5 record changes | |||||
| 2026-01-26 | Added to CISA KEV | CVE-2026-21509 | MicrosoftOffice CISA KEV | fix due 2026-02-16 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-01-26 | Added to CISA KEV | CVE-2018-14634 | LinuxKernal CISA KEV | fix due 2026-02-16 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-01-26 | Added to CISA KEV | CVE-2025-52691 | SmarterToolsSmarterMail CISA KEV | fix due 2026-02-16 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-01-26 | Added to CISA KEV | CVE-2026-23760 | SmarterToolsSmarterMail CISA KEV | fix due 2026-02-16 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-01-26 | Added to CISA KEV | CVE-2026-24061 | GNUInetUtils CISA KEV | fix due 2026-02-16 | Not applicable: Added to CISA KEV has no earlier value |
| Fri 23 Jan 2026· 1 record change | |||||
| 2026-01-23 | Added to CISA KEV | CVE-2024-37079 | BroadcomVMware vCenter Server CISA KEV | fix due 2026-02-13 | Not applicable: Added to CISA KEV has no earlier value |
| Thu 22 Jan 2026· 4 record changes | |||||
| 2026-01-22 | Added to CISA KEV | CVE-2025-68645 | Synacor Zimbra Collaboration Suite (ZCS) CISA KEV | fix due 2026-02-12 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-01-22 | Added to CISA KEV | CVE-2025-34026 | VersaConcerto CISA KEV | fix due 2026-02-12 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-01-22 | Added to CISA KEV | CVE-2025-31125 | ViteVitejs CISA KEV | fix due 2026-02-12 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-01-22 | Added to CISA KEV | CVE-2025-54313 | Prettiereslint-config-prettier CISA KEV | fix due 2026-02-12 | Not applicable: Added to CISA KEV has no earlier value |
| Wed 21 Jan 2026· 1 record change | |||||
| 2026-01-21 | Added to CISA KEV | CVE-2026-20045 | CiscoUnified Communications Manager CISA KEV | fix due 2026-02-11 | Not applicable: Added to CISA KEV has no earlier value |
| Tue 13 Jan 2026· 1 record change | |||||
| 2026-01-13 | Added to CISA KEV | CVE-2026-20805 | MicrosoftWindows CISA KEV | fix due 2026-02-03 | Not applicable: Added to CISA KEV has no earlier value |
| Mon 12 Jan 2026· 1 record change | |||||
| 2026-01-12 | Added to CISA KEV | CVE-2025-8110 | GogsGogs CISA KEV | fix due 2026-02-02 | Not applicable: Added to CISA KEV has no earlier value |
| Wed 7 Jan 2026· 2 record changes | |||||
| 2026-01-07 | Added to CISA KEV | CVE-2009-0556 | MicrosoftOffice CISA KEV | fix due 2026-01-28 | Not applicable: Added to CISA KEV has no earlier value |
| 2026-01-07 | Added to CISA KEV | CVE-2025-37164 | Hewlett Packard (HP)OneView CISA KEV | fix due 2026-01-28 | Not applicable: Added to CISA KEV has no earlier value |
| Mon 29 Dec 2025· 1 record change | |||||
| 2025-12-29 | Added to CISA KEV | CVE-2025-14847 | MongoDBMongoDB and MongoDB Server CISA KEV | fix due 2026-01-19 | Not applicable: Added to CISA KEV has no earlier value |
| Mon 22 Dec 2025· 1 record change | |||||
| 2025-12-22 | Added to CISA KEV | CVE-2023-52163 | DigieverDS-2105 Pro CISA KEV | fix due 2026-01-12 | Not applicable: Added to CISA KEV has no earlier value |
| Fri 19 Dec 2025· 2 record changes | |||||
| 2025-12-19 | Added to CISA KEV | CVE-2025-14733 | WatchGuardFirebox CISA KEV | fix due 2025-12-26 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-12-19 | Ransomware use confirmed | CVE-2024-53704 | SonicWallSonicOS CISA KEV | stated at publication Unknown, now states Known | Days to revision at least 297 |
| Wed 17 Dec 2025· 3 record changes | |||||
| 2025-12-17 | Added to CISA KEV | CVE-2025-59374 | ASUSLive Update CISA KEV | fix due 2026-01-07 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-12-17 | Added to CISA KEV | CVE-2025-40602 | SonicWallSMA1000 appliance CISA KEV | fix due 2025-12-24 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-12-17 | Added to CISA KEV | CVE-2025-20393 | CiscoMultiple Products CISA KEV | fix due 2025-12-24 | Not applicable: Added to CISA KEV has no earlier value |
| Tue 16 Dec 2025· 1 record change | |||||
| 2025-12-16 | Added to CISA KEV | CVE-2025-59718 | FortinetMultiple Products CISA KEV | fix due 2025-12-23 | Not applicable: Added to CISA KEV has no earlier value |
| Mon 15 Dec 2025· 2 record changes | |||||
| 2025-12-15 | Added to CISA KEV | CVE-2025-14611 | GladinetCentreStack and Triofox CISA KEV | fix due 2026-01-05 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-12-15 | Added to CISA KEV | CVE-2025-43529 | AppleMultiple Products CISA KEV | fix due 2026-01-05 | Not applicable: Added to CISA KEV has no earlier value |
| Fri 12 Dec 2025· 3 record changes | |||||
| 2025-12-12 | Added to CISA KEV | CVE-2025-14174 | GoogleChromium CISA KEV | fix due 2026-01-02 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-12-12 | Added to CISA KEV | CVE-2018-4063 | Sierra WirelessAirLink ALEOS CISA KEV | fix due 2026-01-02 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-12-12 | Ransomware use confirmed | CVE-2025-55182 | MetaReact Server Components CISA KEV | stated at publication Unknown, now states Known | Days to revision 7 |
| Thu 11 Dec 2025· 1 record change | |||||
| 2025-12-11 | Added to CISA KEV | CVE-2025-58360 | OSGeoGeoServer CISA KEV | fix due 2026-01-01 | Not applicable: Added to CISA KEV has no earlier value |
| Tue 9 Dec 2025· 3 record changes | |||||
| 2025-12-09 | Added to CISA KEV | CVE-2025-6218 | RARLABWinRAR CISA KEV | fix due 2025-12-30 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-12-09 | Added to CISA KEV | CVE-2025-62221 | MicrosoftWindows CISA KEV | fix due 2025-12-30 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-12-09 | KEV due date moved | CVE-2025-55182 | MetaReact Server Components CISA KEV | stated at publication 2025-12-26, now states 2025-12-12 | Days to revision 4 |
| Mon 8 Dec 2025· 2 record changes | |||||
| 2025-12-08 | Added to CISA KEV | CVE-2022-37055 | D-LinkRouters CISA KEV | fix due 2025-12-29 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-12-08 | Added to CISA KEV | CVE-2025-66644 | Array Networks ArrayOS AG CISA KEV | fix due 2025-12-29 | Not applicable: Added to CISA KEV has no earlier value |
| Fri 5 Dec 2025· 1 record change | |||||
| 2025-12-05 | Added to CISA KEV | CVE-2025-55182 | MetaReact Server Components CISA KEV | fix due 2025-12-26 | Not applicable: Added to CISA KEV has no earlier value |
| Wed 3 Dec 2025· 1 record change | |||||
| 2025-12-03 | Added to CISA KEV | CVE-2021-26828 | OpenPLCScadaBR CISA KEV | fix due 2025-12-24 | Not applicable: Added to CISA KEV has no earlier value |
| Tue 2 Dec 2025· 2 record changes | |||||
| 2025-12-02 | Added to CISA KEV | CVE-2025-48633 | AndroidFramework CISA KEV | fix due 2025-12-23 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-12-02 | Added to CISA KEV | CVE-2025-48572 | AndroidFramework CISA KEV | fix due 2025-12-23 | Not applicable: Added to CISA KEV has no earlier value |
| Fri 28 Nov 2025· 1 record change | |||||
| 2025-11-28 | Added to CISA KEV | CVE-2021-26829 | OpenPLCScadaBR CISA KEV | fix due 2025-12-19 | Not applicable: Added to CISA KEV has no earlier value |
| Fri 21 Nov 2025· 1 record change | |||||
| 2025-11-21 | Added to CISA KEV | CVE-2025-61757 | OracleFusion Middleware CISA KEV | fix due 2025-12-12 | Not applicable: Added to CISA KEV has no earlier value |
| Wed 19 Nov 2025· 1 record change | |||||
| 2025-11-19 | Added to CISA KEV | CVE-2025-13223 | GoogleChromium V8 CISA KEV | fix due 2025-12-10 | Not applicable: Added to CISA KEV has no earlier value |
| Tue 18 Nov 2025· 1 record change | |||||
| 2025-11-18 | Added to CISA KEV | CVE-2025-58034 | FortinetFortiWeb CISA KEV | fix due 2025-11-25 | Not applicable: Added to CISA KEV has no earlier value |
| Fri 14 Nov 2025· 1 record change | |||||
| 2025-11-14 | Added to CISA KEV | CVE-2025-64446 | FortinetFortiWeb CISA KEV | fix due 2025-11-21 | Not applicable: Added to CISA KEV has no earlier value |
| Wed 12 Nov 2025· 3 record changes | |||||
| 2025-11-12 | Added to CISA KEV | CVE-2025-12480 | GladinetTriofox CISA KEV | fix due 2025-12-03 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-11-12 | Added to CISA KEV | CVE-2025-62215 | MicrosoftWindows CISA KEV | fix due 2025-12-03 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-11-12 | Added to CISA KEV | CVE-2025-9242 | WatchGuardFirebox CISA KEV | fix due 2025-12-03 | Not applicable: Added to CISA KEV has no earlier value |
| Mon 10 Nov 2025· 1 record change | |||||
| 2025-11-10 | Added to CISA KEV | CVE-2025-21042 | SamsungMobile Devices CISA KEV | fix due 2025-12-01 | Not applicable: Added to CISA KEV has no earlier value |
| Tue 4 Nov 2025· 2 record changes | |||||
| 2025-11-04 | Added to CISA KEV | CVE-2025-48703 | CWPControl Web Panel CISA KEV | fix due 2025-11-25 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-11-04 | Added to CISA KEV | CVE-2025-11371 | GladinetCentreStack and Triofox CISA KEV | fix due 2025-11-25 | Not applicable: Added to CISA KEV has no earlier value |
| Thu 30 Oct 2025· 3 record changes | |||||
| 2025-10-30 | Added to CISA KEV | CVE-2025-41244 | BroadcomVMware Aria Operations and VMware Tools CISA KEV | fix due 2025-11-20 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-10-30 | Added to CISA KEV | CVE-2025-24893 | XWikiPlatform CISA KEV | fix due 2025-11-20 | Not applicable: Added to CISA KEV has no earlier value |
| 2025-10-30 | Ransomware use confirmed | CVE-2024-1086 | LinuxKernel CISA KEV | stated at publication Unknown, now states Known | Days to revision at least 247 |
Rows, not records: a moved fix version or an extended range counts once per record, product and release branch; an added product once per record and product; every other kind once per record or advisory. Days to revision is how long the value first stated stood: from the record's or advisory's publication, or from the day a KEV field value was first seen, to the first commit that replaced it. An addition to KEV has no earlier value and shows none.
Data sources and quality
Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.
A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.
The units, the refusals, the cut-offs and every source, in full →