Added to CISA KEV
| Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin. | Record, Which record was edited, by its CVE id, or how many records one collapsed line stands on. | Vendor · product, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry. | What changed | Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong. |
|---|---|---|---|---|
| Fri 1 May 2026· 1 change | ||||
| 2026-05-01 | CVE-2026-31431 | LinuxKernel CISA KEV | fix due 2026-05-15 | Duration unknown |
| Thu 30 Apr 2026· 1 change | ||||
| 2026-04-30 | CVE-2026-41940 | WebProscPanel & WHM and WP2 (WordPress Squared) CISA KEV | fix due 2026-05-03 | Duration unknown |
| Tue 28 Apr 2026· 2 changes | ||||
| 2026-04-28 | CVE-2024-1708 | ConnectWiseScreenConnect CISA KEV | fix due 2026-05-12 | Duration unknown |
| 2026-04-28 | CVE-2026-32202 | MicrosoftWindows CISA KEV | fix due 2026-05-12 | Duration unknown |
| Fri 24 Apr 2026· 4 changes | ||||
| 2026-04-24 | CVE-2025-29635 | D-LinkDIR-823X CISA KEV | fix due 2026-05-08 | Duration unknown |
| 2026-04-24 | CVE-2024-7399 | SamsungMagicINFO 9 Server CISA KEV | fix due 2026-05-08 | Duration unknown |
| 2026-04-24 | SimpleHelp SimpleHelp | fix due 2026-05-08 | Duration unknown | |
| 2026-04-24 | CVE-2024-57728 | same vendor as the line above | same change as the line above | Duration unknown |
| 2026-04-24 | CVE-2024-57726 | same vendor as the line above | same change as the line above | Duration unknown |
| Thu 23 Apr 2026· 1 change | ||||
| 2026-04-23 | CVE-2026-39987 | MarimoMarimo CISA KEV | fix due 2026-05-07 | Duration unknown |
| Wed 22 Apr 2026· 1 change | ||||
| 2026-04-22 | CVE-2026-33825 | MicrosoftDefender CISA KEV | fix due 2026-05-06 | Duration unknown |
| Mon 20 Apr 2026· 8 changes | ||||
| 2026-04-20 | CVE-2026-20122 | CiscoCatalyst SD-WAN Manger CISA KEV | fix due 2026-04-23 | Duration unknown |
| 2026-04-20 | CiscoCatalyst SD-WAN Manager | fix due 2026-04-23 | Duration unknown | |
| 2026-04-20 | CVE-2026-20133 | same vendor as the line above | same change as the line above | Duration unknown |
| 2026-04-20 | CVE-2026-20128 | same vendor as the line above | same change as the line above | Duration unknown |
| 2026-04-20 | CVE-2025-2749 | KenticoKentico Xperience CISA KEV | fix due 2026-05-04 | Duration unknown |
| 2026-04-20 | CVE-2023-27351 | PaperCutNG/MF CISA KEV | fix due 2026-05-04 | Duration unknown |
| 2026-04-20 | CVE-2025-48700 | SynacorZimbra Collaboration Suite (ZCS) CISA KEV | fix due 2026-04-23 | Duration unknown |
| 2026-04-20 | CVE-2025-32975 | QuestKACE Systems Management Appliance (SMA) CISA KEV | fix due 2026-05-04 | Duration unknown |
| 2026-04-20 | CVE-2024-27199 | JetBrainsTeamCity CISA KEV | fix due 2026-05-04 | Duration unknown |
| Thu 16 Apr 2026· 1 change | ||||
| 2026-04-16 | CVE-2026-34197 | ApacheActiveMQ CISA KEV | fix due 2026-04-30 | Duration unknown |
| Tue 14 Apr 2026· 2 changes | ||||
| 2026-04-14 | CVE-2009-0238 | MicrosoftOffice CISA KEV | fix due 2026-04-28 | Duration unknown |
| 2026-04-14 | CVE-2026-32201 | MicrosoftSharePoint Server CISA KEV | fix due 2026-04-28 | Duration unknown |
| Mon 13 Apr 2026· 7 changes | ||||
| 2026-04-13 | CVE-2012-1854 | MicrosoftVisual Basic for Applications (VBA) CISA KEV | fix due 2026-04-27 | Duration unknown |
| 2026-04-13 | MicrosoftWindows | fix due 2026-04-27 | Duration unknown | |
| 2026-04-13 | CVE-2025-60710 | same vendor as the line above | same change as the line above | Duration unknown |
| 2026-04-13 | CVE-2023-36424 | same vendor as the line above | same change as the line above | Duration unknown |
| 2026-04-13 | CVE-2023-21529 | MicrosoftExchange Server CISA KEV | fix due 2026-04-27 | Duration unknown |
| 2026-04-13 | CVE-2020-9715 | AdobeAcrobat CISA KEV | fix due 2026-04-27 | Duration unknown |
| 2026-04-13 | CVE-2026-21643 | FortinetFortiClient EMS CISA KEV | fix due 2026-04-16 | Duration unknown |
| 2026-04-13 | CVE-2026-34621 | AdobeAcrobat and Reader CISA KEV | fix due 2026-04-27 | Duration unknown |
| Wed 8 Apr 2026· 1 change | ||||
| 2026-04-08 | CVE-2026-1340 | IvantiEndpoint Manager Mobile (EPMM) CISA KEV | fix due 2026-04-11 | Duration unknown |
| Mon 6 Apr 2026· 1 change | ||||
| 2026-04-06 | CVE-2026-35616 | FortinetFortiClient EMS CISA KEV | fix due 2026-04-09 | Duration unknown |
| Thu 2 Apr 2026· 1 change | ||||
| 2026-04-02 | CVE-2026-3502 | TrueConfClient CISA KEV | fix due 2026-04-16 | Duration unknown |
| Wed 1 Apr 2026· 1 change | ||||
| 2026-04-01 | CVE-2026-5281 | GoogleDawn CISA KEV | fix due 2026-04-15 | Duration unknown |
| Mon 30 Mar 2026· 1 change | ||||
| 2026-03-30 | CVE-2026-3055 | CitrixNetScaler CISA KEV | fix due 2026-04-02 | Duration unknown |
| Fri 27 Mar 2026· 1 change | ||||
| 2026-03-27 | CVE-2025-53521 | F5BIG-IP CISA KEV | fix due 2026-03-30 | Duration unknown |
| Thu 26 Mar 2026· 1 change | ||||
| 2026-03-26 | CVE-2026-33634 | AquasecurityTrivy CISA KEV | fix due 2026-04-09 | Duration unknown |
| Wed 25 Mar 2026· 1 change | ||||
| 2026-03-25 | CVE-2026-33017 | LangflowLangflow CISA KEV | fix due 2026-04-08 | Duration unknown |
| Fri 20 Mar 2026· 5 changes | ||||
| 2026-03-20 | CVE-2025-32432 | Craft CMSCraft CMS CISA KEV | fix due 2026-04-03 | Duration unknown |
| 2026-03-20 | CVE-2025-54068 | LaravelLivewire CISA KEV | fix due 2026-04-03 | Duration unknown |
| 2026-03-20 | AppleMultiple Products | fix due 2026-04-03 | Duration unknown | |
| 2026-03-20 | CVE-2025-43510 | same vendor as the line above | same change as the line above | Duration unknown |
| 2026-03-20 | CVE-2025-43520 | same vendor as the line above | same change as the line above | Duration unknown |
| 2026-03-20 | CVE-2025-31277 | same vendor as the line above | same change as the line above | Duration unknown |
| Thu 19 Mar 2026· 1 change | ||||
| 2026-03-19 | CVE-2026-20131 | CiscoSecure Firewall Management Center (FMC) CISA KEV | fix due 2026-03-22 | Duration unknown |
| Wed 18 Mar 2026· 2 changes | ||||
| 2026-03-18 | CVE-2026-20963 | MicrosoftSharePoint CISA KEV | fix due 2026-03-21 | Duration unknown |
| 2026-03-18 | CVE-2025-66376 | SynacorZimbra Collaboration Suite (ZCS) CISA KEV | fix due 2026-04-01 | Duration unknown |
| Mon 16 Mar 2026· 1 change | ||||
| 2026-03-16 | CVE-2025-47813 | Wing FTP ServerWing FTP Server CISA KEV | fix due 2026-03-30 | Duration unknown |
| Fri 13 Mar 2026· 2 changes | ||||
| 2026-03-13 | CVE-2026-3910 | GoogleChromium V8 CISA KEV | fix due 2026-03-27 | Duration unknown |
| 2026-03-13 | CVE-2026-3909 | GoogleSkia CISA KEV | fix due 2026-03-27 | Duration unknown |
| Wed 11 Mar 2026· 1 change | ||||
| 2026-03-11 | CVE-2025-68613 | n8nn8n CISA KEV | fix due 2026-03-25 | Duration unknown |
| Mon 9 Mar 2026· 3 changes | ||||
| 2026-03-09 | CVE-2021-22054 | OmnissaWorkspace One UEM CISA KEV | fix due 2026-03-23 | Duration unknown |
| 2026-03-09 | CVE-2025-26399 | SolarWindsWeb Help Desk CISA KEV | fix due 2026-03-12 | Duration unknown |
| 2026-03-09 | CVE-2026-1603 | Ivanti Endpoint Manager (EPM) CISA KEV | fix due 2026-03-23 | Duration unknown |
| Thu 5 Mar 2026· 5 changes | ||||
| 2026-03-05 | CVE-2017-7921 | HikvisionMultiple Products CISA KEV | fix due 2026-03-26 | Duration unknown |
| 2026-03-05 | CVE-2021-22681 | RockwellMultiple Products CISA KEV | fix due 2026-03-26 | Duration unknown |
| 2026-03-05 | AppleMultiple Products | fix due 2026-03-26 | Duration unknown | |
| 2026-03-05 | CVE-2023-43000 | same vendor as the line above | same change as the line above | Duration unknown |
| 2026-03-05 | CVE-2021-30952 | same vendor as the line above | same change as the line above | Duration unknown |
| 2026-03-05 | CVE-2023-41974 | AppleiOS and iPadOS CISA KEV | fix due 2026-03-26 | Duration unknown |
| Tue 3 Mar 2026· 2 changes | ||||
| 2026-03-03 | CVE-2026-22719 | BroadcomVMware Aria Operations CISA KEV | fix due 2026-03-24 | Duration unknown |
| 2026-03-03 | CVE-2026-21385 | QualcommMultiple Chipsets CISA KEV | fix due 2026-03-24 | Duration unknown |
| Wed 25 Feb 2026· 2 changes | ||||
| 2026-02-25 | CVE-2022-20775 | CiscoSD-WAN CISA KEV | fix due 2026-02-27 | Duration unknown |
| 2026-02-25 | CVE-2026-20127 | CiscoCatalyst SD-WAN Controller and Manager CISA KEV | fix due 2026-02-27 | Duration unknown |
| Tue 24 Feb 2026· 1 change | ||||
| 2026-02-24 | CVE-2026-25108 | Soliton Systems K.KFileZen CISA KEV | fix due 2026-03-17 | Duration unknown |
| Fri 20 Feb 2026· 2 changes | ||||
| 2026-02-20 | RoundcubeWebmail | fix due 2026-03-13 | Duration unknown | |
| 2026-02-20 | CVE-2025-49113 | same vendor as the line above | same change as the line above | Duration unknown |
| 2026-02-20 | CVE-2025-68461 | same vendor as the line above | same change as the line above | Duration unknown |
| Wed 18 Feb 2026· 2 changes | ||||
| 2026-02-18 | CVE-2021-22175 | GitLabGitLab CISA KEV | fix due 2026-03-11 | Duration unknown |
| 2026-02-18 | CVE-2026-22769 | DellRecoverPoint for Virtual Machines (RP4VMs) CISA KEV | fix due 2026-02-21 | Duration unknown |
| Tue 17 Feb 2026· 4 changes | ||||
| 2026-02-17 | CVE-2020-7796 | SynacorZimbra Collaboration Suite CISA KEV | fix due 2026-03-10 | Duration unknown |
| 2026-02-17 | CVE-2024-7694 | TeamT5ThreatSonar Anti-Ransomware CISA KEV | fix due 2026-03-10 | Duration unknown |
| 2026-02-17 | CVE-2008-0015 | MicrosoftWindows CISA KEV | fix due 2026-03-10 | Duration unknown |
| 2026-02-17 | CVE-2026-2441 | GoogleChromium CISA KEV | fix due 2026-03-10 | Duration unknown |
| Sat 14 Feb 2026· 1 change | ||||
| 2026-02-14 | CVE-2026-1731 | BeyondTrustRemote Support (RS) and Privileged Remote Access (PRA) CISA KEV | fix due 2026-02-16 · listed 2026-02-13 | Duration unknown |
| Thu 12 Feb 2026· 4 changes | ||||
| 2026-02-12 | CVE-2025-40536 | SolarWindsWeb Help Desk CISA KEV | fix due 2026-02-15 | Duration unknown |
| 2026-02-12 | CVE-2026-20700 | AppleMultiple Products CISA KEV | fix due 2026-03-05 | Duration unknown |
| 2026-02-12 | CVE-2024-43468 | MicrosoftConfiguration Manager CISA KEV | fix due 2026-03-05 | Duration unknown |
| 2026-02-12 | CVE-2025-15556 | Notepad++Notepad++ CISA KEV | fix due 2026-03-05 | Duration unknown |
| Tue 10 Feb 2026· 6 changes | ||||
| 2026-02-10 | MicrosoftWindows | fix due 2026-03-03 | Duration unknown | |
| 2026-02-10 | CVE-2026-21513 | same vendor as the line above | same change as the line above | Duration unknown |
| 2026-02-10 | CVE-2026-21525 | same vendor as the line above | same change as the line above | Duration unknown |
| 2026-02-10 | CVE-2026-21510 | same vendor as the line above | same change as the line above | Duration unknown |
| 2026-02-10 | CVE-2026-21533 | same vendor as the line above | same change as the line above | Duration unknown |
| 2026-02-10 | CVE-2026-21519 | same vendor as the line above | same change as the line above | Duration unknown |
| 2026-02-10 | CVE-2026-21514 | MicrosoftOffice CISA KEV | fix due 2026-03-03 | Duration unknown |
| Thu 5 Feb 2026· 2 changes | ||||
| 2026-02-05 | CVE-2025-11953 | CISA KEV | fix due 2026-02-26 | Duration unknown |
| 2026-02-05 | CVE-2026-24423 | SmarterToolsSmarterMail CISA KEV | fix due 2026-02-26 | Duration unknown |
| Tue 3 Feb 2026· 4 changes | ||||
| 2026-02-03 | CVE-2025-40551 | SolarWindsWeb Help Desk CISA KEV | fix due 2026-02-06 | Duration unknown |
| 2026-02-03 | CVE-2021-39935 | GitLabCommunity and Enterprise Editions CISA KEV | fix due 2026-02-24 | Duration unknown |
| 2026-02-03 | CVE-2025-64328 | SangomaFreePBX CISA KEV | fix due 2026-02-24 | Duration unknown |
| 2026-02-03 | CVE-2019-19006 | SangomaFreePBX CISA KEV | fix due 2026-02-24 | Duration unknown |
| Thu 29 Jan 2026· 2 changes | ||||
| 2026-01-292 commits | CVE-2026-12812 rows, one per record and product | IvantiEndpoint Manager Mobile (EPMM) | fix due 2026-02-01 | Duration unknown |
| 2026-01-29 | CVE-2026-1281 | same vendor as the line above | same change as the line above | Duration unknown |
| 2026-01-29 | CVE-2026-1281 | same vendor as the line above | same change as the line above | Duration unknown |
| Tue 27 Jan 2026· 1 change | ||||
| 2026-01-27 | CVE-2026-24858 | FortinetMultiple Products CISA KEV | fix due 2026-01-30 | Duration unknown |
| Mon 26 Jan 2026· 5 changes | ||||
| 2026-01-26 | CVE-2026-21509 | MicrosoftOffice CISA KEV | fix due 2026-02-16 | Duration unknown |
| 2026-01-26 | CVE-2018-14634 | LinuxKernal CISA KEV | fix due 2026-02-16 | Duration unknown |
| 2026-01-26 | SmarterToolsSmarterMail | fix due 2026-02-16 | Duration unknown | |
| 2026-01-26 | CVE-2025-52691 | same vendor as the line above | same change as the line above | Duration unknown |
| 2026-01-26 | CVE-2026-23760 | same vendor as the line above | same change as the line above | Duration unknown |
| 2026-01-26 | CVE-2026-24061 | GNUInetUtils CISA KEV | fix due 2026-02-16 | Duration unknown |
| Fri 23 Jan 2026· 1 change | ||||
| 2026-01-23 | CVE-2024-37079 | BroadcomVMware vCenter Server CISA KEV | fix due 2026-02-13 | Duration unknown |
| Thu 22 Jan 2026· 4 changes | ||||
| 2026-01-22 | CVE-2025-68645 | Synacor Zimbra Collaboration Suite (ZCS) CISA KEV | fix due 2026-02-12 | Duration unknown |
| 2026-01-22 | CVE-2025-34026 | VersaConcerto CISA KEV | fix due 2026-02-12 | Duration unknown |
| 2026-01-22 | CVE-2025-31125 | ViteVitejs CISA KEV | fix due 2026-02-12 | Duration unknown |
| 2026-01-22 | CVE-2025-54313 | Prettiereslint-config-prettier CISA KEV | fix due 2026-02-12 | Duration unknown |
| Wed 21 Jan 2026· 1 change | ||||
| 2026-01-21 | CVE-2026-20045 | CiscoUnified Communications Manager CISA KEV | fix due 2026-02-11 | Duration unknown |
| Tue 13 Jan 2026· 1 change | ||||
| 2026-01-13 | CVE-2026-20805 | MicrosoftWindows CISA KEV | fix due 2026-02-03 | Duration unknown |
| Mon 12 Jan 2026· 1 change | ||||
| 2026-01-12 | CVE-2025-8110 | GogsGogs CISA KEV | fix due 2026-02-02 | Duration unknown |
| Wed 7 Jan 2026· 2 changes | ||||
| 2026-01-07 | CVE-2009-0556 | MicrosoftOffice CISA KEV | fix due 2026-01-28 | Duration unknown |
| 2026-01-07 | CVE-2025-37164 | Hewlett Packard (HP)OneView CISA KEV | fix due 2026-01-28 | Duration unknown |
| Mon 29 Dec 2025· 1 change | ||||
| 2025-12-29 | CVE-2025-14847 | MongoDBMongoDB and MongoDB Server CISA KEV | fix due 2026-01-19 | Duration unknown |
| Mon 22 Dec 2025· 1 change | ||||
| 2025-12-22 | CVE-2023-52163 | DigieverDS-2105 Pro CISA KEV | fix due 2026-01-12 | Duration unknown |
| Fri 19 Dec 2025· 1 change | ||||
| 2025-12-19 | CVE-2025-14733 | WatchGuardFirebox CISA KEV | fix due 2025-12-26 | Duration unknown |
| Wed 17 Dec 2025· 3 changes | ||||
| 2025-12-17 | CVE-2025-59374 | ASUSLive Update CISA KEV | fix due 2026-01-07 | Duration unknown |
| 2025-12-17 | CVE-2025-40602 | SonicWallSMA1000 appliance CISA KEV | fix due 2025-12-24 | Duration unknown |
| 2025-12-17 | CVE-2025-20393 | CiscoMultiple Products CISA KEV | fix due 2025-12-24 | Duration unknown |
| Tue 16 Dec 2025· 1 change | ||||
| 2025-12-16 | CVE-2025-59718 | FortinetMultiple Products CISA KEV | fix due 2025-12-23 | Duration unknown |
| Mon 15 Dec 2025· 2 changes | ||||
| 2025-12-15 | CVE-2025-14611 | GladinetCentreStack and Triofox CISA KEV | fix due 2026-01-05 | Duration unknown |
| 2025-12-15 | CVE-2025-43529 | AppleMultiple Products CISA KEV | fix due 2026-01-05 | Duration unknown |
This kind is counted once per CVE record, so changes and records are the same number here. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.
What this page cannot see
Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.
A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.
The units, the refusals, the cut-offs and every source, in full →
Paste your closed CVE tickets and see which of these changes hit them →