Skip to content

Added to CISA KEV

Compare earlier and later source statements, with the dates and evidence behind each measured change.

447 changes · newest first · grouped by dayCSVJSONRSS

SinceClear the filter
Counted changes of "Added to CISA KEV", newest first, one line per change to a CVE record, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.Record, Which record was edited, by its CVE id, or how many records one collapsed line stands on.Vendor · product, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.What changedDays to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Fri 1 May 2026· 1 change
2026-05-01CVE-2026-31431
LinuxKernel
CISA KEV
fix due 2026-05-15Duration unknown
Thu 30 Apr 2026· 1 change
2026-04-30CVE-2026-41940
WebProscPanel & WHM and WP2 (WordPress Squared)
CISA KEV
fix due 2026-05-03Duration unknown
Tue 28 Apr 2026· 2 changes
2026-04-28CVE-2024-1708
ConnectWiseScreenConnect
CISA KEV
fix due 2026-05-12Duration unknown
2026-04-28CVE-2026-32202
MicrosoftWindows
CISA KEV
fix due 2026-05-12Duration unknown
Fri 24 Apr 2026· 4 changes
2026-04-24CVE-2025-29635
D-LinkDIR-823X
CISA KEV
fix due 2026-05-08Duration unknown
2026-04-24CVE-2024-7399
SamsungMagicINFO 9 Server
CISA KEV
fix due 2026-05-08Duration unknown
2026-04-24
SimpleHelp SimpleHelp
fix due 2026-05-08Duration unknown
2026-04-24CVE-2024-57728same vendor as the line abovesame change as the line aboveDuration unknown
2026-04-24CVE-2024-57726same vendor as the line abovesame change as the line aboveDuration unknown
Thu 23 Apr 2026· 1 change
2026-04-23CVE-2026-39987
MarimoMarimo
CISA KEV
fix due 2026-05-07Duration unknown
Wed 22 Apr 2026· 1 change
2026-04-22CVE-2026-33825
MicrosoftDefender
CISA KEV
fix due 2026-05-06Duration unknown
Mon 20 Apr 2026· 8 changes
2026-04-20CVE-2026-20122
CiscoCatalyst SD-WAN Manger
CISA KEV
fix due 2026-04-23Duration unknown
2026-04-20
CiscoCatalyst SD-WAN Manager
fix due 2026-04-23Duration unknown
2026-04-20CVE-2026-20133same vendor as the line abovesame change as the line aboveDuration unknown
2026-04-20CVE-2026-20128same vendor as the line abovesame change as the line aboveDuration unknown
2026-04-20CVE-2025-2749
KenticoKentico Xperience
CISA KEV
fix due 2026-05-04Duration unknown
2026-04-20CVE-2023-27351
PaperCutNG/MF
CISA KEV
fix due 2026-05-04Duration unknown
2026-04-20CVE-2025-48700
SynacorZimbra Collaboration Suite (ZCS)
CISA KEV
fix due 2026-04-23Duration unknown
2026-04-20CVE-2025-32975
QuestKACE Systems Management Appliance (SMA)
CISA KEV
fix due 2026-05-04Duration unknown
2026-04-20CVE-2024-27199
JetBrainsTeamCity
CISA KEV
fix due 2026-05-04Duration unknown
Thu 16 Apr 2026· 1 change
2026-04-16CVE-2026-34197
ApacheActiveMQ
CISA KEV
fix due 2026-04-30Duration unknown
Tue 14 Apr 2026· 2 changes
2026-04-14CVE-2009-0238
MicrosoftOffice
CISA KEV
fix due 2026-04-28Duration unknown
2026-04-14CVE-2026-32201
MicrosoftSharePoint Server
CISA KEV
fix due 2026-04-28Duration unknown
Mon 13 Apr 2026· 7 changes
2026-04-13CVE-2012-1854
MicrosoftVisual Basic for Applications (VBA)
CISA KEV
fix due 2026-04-27Duration unknown
2026-04-13
MicrosoftWindows
fix due 2026-04-27Duration unknown
2026-04-13CVE-2025-60710same vendor as the line abovesame change as the line aboveDuration unknown
2026-04-13CVE-2023-36424same vendor as the line abovesame change as the line aboveDuration unknown
2026-04-13CVE-2023-21529
MicrosoftExchange Server
CISA KEV
fix due 2026-04-27Duration unknown
2026-04-13CVE-2020-9715
AdobeAcrobat
CISA KEV
fix due 2026-04-27Duration unknown
2026-04-13CVE-2026-21643
FortinetFortiClient EMS
CISA KEV
fix due 2026-04-16Duration unknown
2026-04-13CVE-2026-34621
AdobeAcrobat and Reader
CISA KEV
fix due 2026-04-27Duration unknown
Wed 8 Apr 2026· 1 change
2026-04-08CVE-2026-1340
IvantiEndpoint Manager Mobile (EPMM)
CISA KEV
fix due 2026-04-11Duration unknown
Mon 6 Apr 2026· 1 change
2026-04-06CVE-2026-35616
FortinetFortiClient EMS
CISA KEV
fix due 2026-04-09Duration unknown
Thu 2 Apr 2026· 1 change
2026-04-02CVE-2026-3502
TrueConfClient
CISA KEV
fix due 2026-04-16Duration unknown
Wed 1 Apr 2026· 1 change
2026-04-01CVE-2026-5281
GoogleDawn
CISA KEV
fix due 2026-04-15Duration unknown
Mon 30 Mar 2026· 1 change
2026-03-30CVE-2026-3055
CitrixNetScaler
CISA KEV
fix due 2026-04-02Duration unknown
Fri 27 Mar 2026· 1 change
2026-03-27CVE-2025-53521
F5BIG-IP
CISA KEV
fix due 2026-03-30Duration unknown
Thu 26 Mar 2026· 1 change
2026-03-26CVE-2026-33634CISA KEVfix due 2026-04-09Duration unknown
Wed 25 Mar 2026· 1 change
2026-03-25CVE-2026-33017
LangflowLangflow
CISA KEV
fix due 2026-04-08Duration unknown
Fri 20 Mar 2026· 5 changes
2026-03-20CVE-2025-32432
Craft CMSCraft CMS
CISA KEV
fix due 2026-04-03Duration unknown
2026-03-20CVE-2025-54068
LaravelLivewire
CISA KEV
fix due 2026-04-03Duration unknown
2026-03-20
AppleMultiple Products
fix due 2026-04-03Duration unknown
2026-03-20CVE-2025-43510same vendor as the line abovesame change as the line aboveDuration unknown
2026-03-20CVE-2025-43520same vendor as the line abovesame change as the line aboveDuration unknown
2026-03-20CVE-2025-31277same vendor as the line abovesame change as the line aboveDuration unknown
Thu 19 Mar 2026· 1 change
2026-03-19CVE-2026-20131
CiscoSecure Firewall Management Center (FMC)
CISA KEV
fix due 2026-03-22Duration unknown
Wed 18 Mar 2026· 2 changes
2026-03-18CVE-2026-20963
MicrosoftSharePoint
CISA KEV
fix due 2026-03-21Duration unknown
2026-03-18CVE-2025-66376
SynacorZimbra Collaboration Suite (ZCS)
CISA KEV
fix due 2026-04-01Duration unknown
Mon 16 Mar 2026· 1 change
2026-03-16CVE-2025-47813
Wing FTP ServerWing FTP Server
CISA KEV
fix due 2026-03-30Duration unknown
Fri 13 Mar 2026· 2 changes
2026-03-13CVE-2026-3910
GoogleChromium V8
CISA KEV
fix due 2026-03-27Duration unknown
2026-03-13CVE-2026-3909
GoogleSkia
CISA KEV
fix due 2026-03-27Duration unknown
Wed 11 Mar 2026· 1 change
2026-03-11CVE-2025-68613
n8nn8n
CISA KEV
fix due 2026-03-25Duration unknown
Mon 9 Mar 2026· 3 changes
2026-03-09CVE-2021-22054
OmnissaWorkspace One UEM
CISA KEV
fix due 2026-03-23Duration unknown
2026-03-09CVE-2025-26399
SolarWindsWeb Help Desk
CISA KEV
fix due 2026-03-12Duration unknown
2026-03-09CVE-2026-1603
Ivanti Endpoint Manager (EPM)
CISA KEV
fix due 2026-03-23Duration unknown
Thu 5 Mar 2026· 5 changes
2026-03-05CVE-2017-7921
HikvisionMultiple Products
CISA KEV
fix due 2026-03-26Duration unknown
2026-03-05CVE-2021-22681
RockwellMultiple Products
CISA KEV
fix due 2026-03-26Duration unknown
2026-03-05
AppleMultiple Products
fix due 2026-03-26Duration unknown
2026-03-05CVE-2023-43000same vendor as the line abovesame change as the line aboveDuration unknown
2026-03-05CVE-2021-30952same vendor as the line abovesame change as the line aboveDuration unknown
2026-03-05CVE-2023-41974
AppleiOS and iPadOS
CISA KEV
fix due 2026-03-26Duration unknown
Tue 3 Mar 2026· 2 changes
2026-03-03CVE-2026-22719
BroadcomVMware Aria Operations
CISA KEV
fix due 2026-03-24Duration unknown
2026-03-03CVE-2026-21385
QualcommMultiple Chipsets
CISA KEV
fix due 2026-03-24Duration unknown
Wed 25 Feb 2026· 2 changes
2026-02-25CVE-2022-20775
CiscoSD-WAN
CISA KEV
fix due 2026-02-27Duration unknown
2026-02-25CVE-2026-20127
CiscoCatalyst SD-WAN Controller and Manager
CISA KEV
fix due 2026-02-27Duration unknown
Tue 24 Feb 2026· 1 change
2026-02-24CVE-2026-25108CISA KEVfix due 2026-03-17Duration unknown
Fri 20 Feb 2026· 2 changes
2026-02-20
RoundcubeWebmail
fix due 2026-03-13Duration unknown
2026-02-20CVE-2025-49113same vendor as the line abovesame change as the line aboveDuration unknown
2026-02-20CVE-2025-68461same vendor as the line abovesame change as the line aboveDuration unknown
Wed 18 Feb 2026· 2 changes
2026-02-18CVE-2021-22175
GitLabGitLab
CISA KEV
fix due 2026-03-11Duration unknown
2026-02-18CVE-2026-22769
DellRecoverPoint for Virtual Machines (RP4VMs)
CISA KEV
fix due 2026-02-21Duration unknown
Tue 17 Feb 2026· 4 changes
2026-02-17CVE-2020-7796
SynacorZimbra Collaboration Suite
CISA KEV
fix due 2026-03-10Duration unknown
2026-02-17CVE-2024-7694
TeamT5ThreatSonar Anti-Ransomware
CISA KEV
fix due 2026-03-10Duration unknown
2026-02-17CVE-2008-0015
MicrosoftWindows
CISA KEV
fix due 2026-03-10Duration unknown
2026-02-17CVE-2026-2441
GoogleChromium
CISA KEV
fix due 2026-03-10Duration unknown
Sat 14 Feb 2026· 1 change
2026-02-14CVE-2026-1731
BeyondTrustRemote Support (RS) and Privileged Remote Access (PRA)
CISA KEV
fix due 2026-02-16 · listed 2026-02-13Duration unknown
Thu 12 Feb 2026· 4 changes
2026-02-12CVE-2025-40536
SolarWindsWeb Help Desk
CISA KEV
fix due 2026-02-15Duration unknown
2026-02-12CVE-2026-20700
AppleMultiple Products
CISA KEV
fix due 2026-03-05Duration unknown
2026-02-12CVE-2024-43468
MicrosoftConfiguration Manager
CISA KEV
fix due 2026-03-05Duration unknown
2026-02-12CVE-2025-15556
Notepad++Notepad++
CISA KEV
fix due 2026-03-05Duration unknown
Tue 10 Feb 2026· 6 changes
2026-02-10
MicrosoftWindows
fix due 2026-03-03Duration unknown
2026-02-10CVE-2026-21513same vendor as the line abovesame change as the line aboveDuration unknown
2026-02-10CVE-2026-21525same vendor as the line abovesame change as the line aboveDuration unknown
2026-02-10CVE-2026-21510same vendor as the line abovesame change as the line aboveDuration unknown
2026-02-10CVE-2026-21533same vendor as the line abovesame change as the line aboveDuration unknown
2026-02-10CVE-2026-21519same vendor as the line abovesame change as the line aboveDuration unknown
2026-02-10CVE-2026-21514
MicrosoftOffice
CISA KEV
fix due 2026-03-03Duration unknown
Thu 5 Feb 2026· 2 changes
2026-02-05CVE-2025-11953CISA KEVfix due 2026-02-26Duration unknown
2026-02-05CVE-2026-24423
SmarterToolsSmarterMail
CISA KEV
fix due 2026-02-26Duration unknown
Tue 3 Feb 2026· 4 changes
2026-02-03CVE-2025-40551
SolarWindsWeb Help Desk
CISA KEV
fix due 2026-02-06Duration unknown
2026-02-03CVE-2021-39935
GitLabCommunity and Enterprise Editions
CISA KEV
fix due 2026-02-24Duration unknown
2026-02-03CVE-2025-64328
SangomaFreePBX
CISA KEV
fix due 2026-02-24Duration unknown
2026-02-03CVE-2019-19006
SangomaFreePBX
CISA KEV
fix due 2026-02-24Duration unknown
Thu 29 Jan 2026· 2 changes
2026-01-292 commitsCVE-2026-12812 rows, one per record and product
IvantiEndpoint Manager Mobile (EPMM)
fix due 2026-02-01Duration unknown
2026-01-29CVE-2026-1281same vendor as the line abovesame change as the line aboveDuration unknown
2026-01-29CVE-2026-1281same vendor as the line abovesame change as the line aboveDuration unknown
Tue 27 Jan 2026· 1 change
2026-01-27CVE-2026-24858
FortinetMultiple Products
CISA KEV
fix due 2026-01-30Duration unknown
Mon 26 Jan 2026· 5 changes
2026-01-26CVE-2026-21509
MicrosoftOffice
CISA KEV
fix due 2026-02-16Duration unknown
2026-01-26CVE-2018-14634
LinuxKernal
CISA KEV
fix due 2026-02-16Duration unknown
2026-01-26
SmarterToolsSmarterMail
fix due 2026-02-16Duration unknown
2026-01-26CVE-2025-52691same vendor as the line abovesame change as the line aboveDuration unknown
2026-01-26CVE-2026-23760same vendor as the line abovesame change as the line aboveDuration unknown
2026-01-26CVE-2026-24061
GNUInetUtils
CISA KEV
fix due 2026-02-16Duration unknown
Fri 23 Jan 2026· 1 change
2026-01-23CVE-2024-37079
BroadcomVMware vCenter Server
CISA KEV
fix due 2026-02-13Duration unknown
Thu 22 Jan 2026· 4 changes
2026-01-22CVE-2025-68645
Synacor Zimbra Collaboration Suite (ZCS)
CISA KEV
fix due 2026-02-12Duration unknown
2026-01-22CVE-2025-34026
VersaConcerto
CISA KEV
fix due 2026-02-12Duration unknown
2026-01-22CVE-2025-31125
ViteVitejs
CISA KEV
fix due 2026-02-12Duration unknown
2026-01-22CVE-2025-54313
Prettiereslint-config-prettier
CISA KEV
fix due 2026-02-12Duration unknown
Wed 21 Jan 2026· 1 change
2026-01-21CVE-2026-20045
CiscoUnified Communications Manager
CISA KEV
fix due 2026-02-11Duration unknown
Tue 13 Jan 2026· 1 change
2026-01-13CVE-2026-20805
MicrosoftWindows
CISA KEV
fix due 2026-02-03Duration unknown
Mon 12 Jan 2026· 1 change
2026-01-12CVE-2025-8110
GogsGogs
CISA KEV
fix due 2026-02-02Duration unknown
Wed 7 Jan 2026· 2 changes
2026-01-07CVE-2009-0556
MicrosoftOffice
CISA KEV
fix due 2026-01-28Duration unknown
2026-01-07CVE-2025-37164CISA KEVfix due 2026-01-28Duration unknown
Mon 29 Dec 2025· 1 change
2025-12-29CVE-2025-14847
MongoDBMongoDB and MongoDB Server
CISA KEV
fix due 2026-01-19Duration unknown
Mon 22 Dec 2025· 1 change
2025-12-22CVE-2023-52163
DigieverDS-2105 Pro
CISA KEV
fix due 2026-01-12Duration unknown
Fri 19 Dec 2025· 1 change
2025-12-19CVE-2025-14733
WatchGuardFirebox
CISA KEV
fix due 2025-12-26Duration unknown
Wed 17 Dec 2025· 3 changes
2025-12-17CVE-2025-59374
ASUSLive Update
CISA KEV
fix due 2026-01-07Duration unknown
2025-12-17CVE-2025-40602
SonicWallSMA1000 appliance
CISA KEV
fix due 2025-12-24Duration unknown
2025-12-17CVE-2025-20393
CiscoMultiple Products
CISA KEV
fix due 2025-12-24Duration unknown
Tue 16 Dec 2025· 1 change
2025-12-16CVE-2025-59718
FortinetMultiple Products
CISA KEV
fix due 2025-12-23Duration unknown
Mon 15 Dec 2025· 2 changes
2025-12-15CVE-2025-14611
GladinetCentreStack and Triofox
CISA KEV
fix due 2026-01-05Duration unknown
2025-12-15CVE-2025-43529
AppleMultiple Products
CISA KEV
fix due 2026-01-05Duration unknown

This kind is counted once per CVE record, so changes and records are the same number here. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

What this page cannot see

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Paste your closed CVE tickets and see which of these changes hit them →