Skip to content

Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

568 changes · newest first · grouped by dayCSVJSONRSS

SinceClear the filter
ChangedSourceRows
Counted changes, newest first, one line per change to a CVE record, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.KindRecord, Which record was edited, by its CVE id, or how many records one collapsed line stands on.Vendor · product, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.What changedDays to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Mon 8 Jun 2026· 2 changes
2026-06-08Added to CISA KEVCVE-2026-50751
Check PointSecurity Gateway
CISA KEV
fix due 2026-06-11Duration unknown
2026-06-08Added to CISA KEVCVE-2026-42271
BerriAILiteLLM
CISA KEV
fix due 2026-06-22Duration unknown
Fri 5 Jun 2026· 1 change
2026-06-05Added to CISA KEVCVE-2026-28318
SolarWindsServ-U
CISA KEV
fix due 2026-06-19Duration unknown
Wed 3 Jun 2026· 1 change
2026-06-03Added to CISA KEVCVE-2026-45247
MirasvitMirasvit Full Page Cache Warmer
CISA KEV
fix due 2026-06-06Duration unknown
Tue 2 Jun 2026· 2 changes
2026-06-02Added to CISA KEVCVE-2022-0492
LinuxKernel
CISA KEV
fix due 2026-06-05Duration unknown
2026-06-02Added to CISA KEVCVE-2025-48595
AndroidFramework
CISA KEV
fix due 2026-06-05Duration unknown
Mon 1 Jun 2026· 1 change
2026-06-01Added to CISA KEVCVE-2024-21182
OracleWebLogic Server
CISA KEV
fix due 2026-06-04Duration unknown
Fri 29 May 2026· 1 change
2026-05-29Added to CISA KEVCVE-2026-0257CISA KEVfix due 2026-06-01Duration unknown
Thu 28 May 2026· 2 changes
2026-05-28Ransomware use confirmedCVE-2026-48027
NxNx Console
CISA KEV
stated at publication Unknown, now states KnownTime to revision 1 days
2026-05-28Ransomware use confirmedCVE-2026-45321
TanStackTanStack
CISA KEV
stated at publication Unknown, now states KnownTime to revision 1 days
Wed 27 May 2026· 3 changes
2026-05-27Added to CISA KEVCVE-2026-48027
NxNx Console
CISA KEV
fix due 2026-06-10Duration unknown
2026-05-27Added to CISA KEVCVE-2026-45321
TanStackTanStack
CISA KEV
fix due 2026-06-10Duration unknown
2026-05-27Added to CISA KEVCVE-2026-8398
DaemonDaemon Tools Lite
CISA KEV
fix due 2026-05-30Duration unknown
Tue 26 May 2026· 1 change
2026-05-26Added to CISA KEVCVE-2026-48172
LiteSpeedcPanel Plugin
CISA KEV
fix due 2026-05-29Duration unknown
Fri 22 May 2026· 2 changes
2026-05-22Added to CISA KEVCVE-2026-9082
DrupalCore
CISA KEV
fix due 2026-05-27Duration unknown
2026-05-22Ransomware use confirmedCVE-2019-15107
WebminWebmin
CISA KEV
stated at publication Unknown, now states KnownDuration unknown
Thu 21 May 2026· 3 changes
2026-05-21Added to CISA KEVCVE-2025-34291
LangflowLangflow
CISA KEV
fix due 2026-06-04Duration unknown
2026-05-21Added to CISA KEVCVE-2026-34926
Trend MicroApex One
CISA KEV
fix due 2026-06-04Duration unknown
2026-05-21Ransomware use confirmedCVE-2013-0422
OracleJava Runtime Environment (JRE)
CISA KEV
stated at publication Unknown, now states KnownDuration unknown
Wed 20 May 2026· 7 changes
2026-05-20Added to CISA KEVCVE-2010-0249
MicrosoftInternet Explorer
CISA KEV
fix due 2026-06-03 · listed 2026-06-03Duration unknown
2026-05-20Added to CISA KEVCVE-2008-4250
MicrosoftWindows
CISA KEV
fix due 2026-06-03Duration unknown
2026-05-20Added to CISA KEVCVE-2009-1537
MicrosoftDirectX
CISA KEV
fix due 2026-06-03Duration unknown
2026-05-20Added to CISA KEVCVE-2009-3459
AdobeAcrobat and Reader
CISA KEV
fix due 2026-06-03Duration unknown
2026-05-20Added to CISA KEVCVE-2010-0806
MicrosoftInternet Explorer
CISA KEV
fix due 2026-06-03Duration unknown
2026-05-20Added to CISA KEV
MicrosoftDefender
fix due 2026-06-03Duration unknown
2026-05-20same kind of change as the line aboveCVE-2026-41091same vendor as the line abovesame change as the line aboveDuration unknown
2026-05-20same kind of change as the line aboveCVE-2026-45498same vendor as the line abovesame change as the line aboveDuration unknown
Fri 15 May 2026· 1 change
2026-05-15Added to CISA KEVCVE-2026-42897
MicrosoftMicrosoft
CISA KEV
fix due 2026-05-29Duration unknown
Thu 14 May 2026· 4 changes
2026-05-14Added to CISA KEVCVE-2026-20182
CiscoCatalyst SD-WAN
CISA KEV
fix due 2026-05-17Duration unknown
2026-05-14Ransomware use confirmedCVE-2024-1708
ConnectWiseScreenConnect
CISA KEV
stated at publication Unknown, now states KnownTime to revision 16 days
2026-05-14Ransomware use confirmed
SimpleHelp SimpleHelp
stated at publication Unknown, now states KnownTime to revision 20 days
2026-05-14same kind of change as the line aboveCVE-2024-57728same vendor as the line abovesame change as the line aboveTime to revision 20 days
2026-05-14same kind of change as the line aboveCVE-2024-57726same vendor as the line abovesame change as the line aboveTime to revision 20 days
Wed 13 May 2026· 1 change
2026-05-13KEV required action changedCVE-2026-0300CISA KEVstated at publication Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Until the vendor releases an official fix, the following workaround should be implemented: - Restrict User-ID Authentication Portal access to only trusted zones. - Disable User-ID Authentication Portal if not required., now states Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Until the vendor releases an official fix, the following workaround should be implemented: - Restrict User-ID Authentication Portal access to only trusted zones. - Disable User-ID Authentication Portal if not required. 5/13/2026: Palo Alto has released a variety of patches. If these are relevant to your environment, please apply the designated patch.Time to revision 7 days
Fri 8 May 2026· 1 change
2026-05-08Added to CISA KEVCVE-2026-42208
BerriAILiteLLM
CISA KEV
fix due 2026-05-11Duration unknown
Thu 7 May 2026· 1 change
2026-05-07Added to CISA KEVCVE-2026-6973
IvantiEndpoint Manager Mobile (EPMM)
CISA KEV
fix due 2026-05-10Duration unknown
Wed 6 May 2026· 1 change
2026-05-06Added to CISA KEVCVE-2026-0300CISA KEVfix due 2026-05-09Duration unknown
Tue 5 May 2026· 1 change
2026-05-05Ransomware use confirmedCVE-2026-41940
WebProscPanel & WHM and WP2 (WordPress Squared)
CISA KEV
stated at publication Unknown, now states KnownTime to revision 5 days
Fri 1 May 2026· 1 change
2026-05-01Added to CISA KEVCVE-2026-31431
LinuxKernel
CISA KEV
fix due 2026-05-15Duration unknown
Thu 30 Apr 2026· 1 change
2026-04-30Added to CISA KEVCVE-2026-41940
WebProscPanel & WHM and WP2 (WordPress Squared)
CISA KEV
fix due 2026-05-03Duration unknown
Tue 28 Apr 2026· 2 changes
2026-04-28Added to CISA KEVCVE-2024-1708
ConnectWiseScreenConnect
CISA KEV
fix due 2026-05-12Duration unknown
2026-04-28Added to CISA KEVCVE-2026-32202
MicrosoftWindows
CISA KEV
fix due 2026-05-12Duration unknown
Fri 24 Apr 2026· 4 changes
2026-04-24Added to CISA KEVCVE-2025-29635
D-LinkDIR-823X
CISA KEV
fix due 2026-05-08Duration unknown
2026-04-24Added to CISA KEVCVE-2024-7399
SamsungMagicINFO 9 Server
CISA KEV
fix due 2026-05-08Duration unknown
2026-04-24Added to CISA KEV
SimpleHelp SimpleHelp
fix due 2026-05-08Duration unknown
2026-04-24same kind of change as the line aboveCVE-2024-57728same vendor as the line abovesame change as the line aboveDuration unknown
2026-04-24same kind of change as the line aboveCVE-2024-57726same vendor as the line abovesame change as the line aboveDuration unknown
Thu 23 Apr 2026· 1 change
2026-04-23Added to CISA KEVCVE-2026-39987
MarimoMarimo
CISA KEV
fix due 2026-05-07Duration unknown
Wed 22 Apr 2026· 1 change
2026-04-22Added to CISA KEVCVE-2026-33825
MicrosoftDefender
CISA KEV
fix due 2026-05-06Duration unknown
Tue 21 Apr 2026· 4 changes
2026-04-21Ransomware use confirmedCVE-2023-27351
PaperCutNG/MF
CISA KEV
stated at publication Unknown, now states KnownTime to revision 1 days
2026-04-21Ransomware use confirmedCVE-2024-27199
JetBrainsTeamCity
CISA KEV
stated at publication Unknown, now states KnownTime to revision 1 days
2026-04-21Ransomware use confirmedCVE-2023-21529
MicrosoftExchange Server
CISA KEV
stated at publication Unknown, now states KnownTime to revision 8 days
2026-04-21Ransomware use confirmedCVE-2025-52691
SmarterToolsSmarterMail
CISA KEV
stated at publication Unknown, now states KnownTime to revision 85 days
Mon 20 Apr 2026· 8 changes
2026-04-20Added to CISA KEVCVE-2026-20122
CiscoCatalyst SD-WAN Manger
CISA KEV
fix due 2026-04-23Duration unknown
2026-04-20Added to CISA KEV
CiscoCatalyst SD-WAN Manager
fix due 2026-04-23Duration unknown
2026-04-20same kind of change as the line aboveCVE-2026-20133same vendor as the line abovesame change as the line aboveDuration unknown
2026-04-20same kind of change as the line aboveCVE-2026-20128same vendor as the line abovesame change as the line aboveDuration unknown
2026-04-20Added to CISA KEVCVE-2025-2749
KenticoKentico Xperience
CISA KEV
fix due 2026-05-04Duration unknown
2026-04-20Added to CISA KEVCVE-2023-27351
PaperCutNG/MF
CISA KEV
fix due 2026-05-04Duration unknown
2026-04-20Added to CISA KEVCVE-2025-48700
SynacorZimbra Collaboration Suite (ZCS)
CISA KEV
fix due 2026-04-23Duration unknown
2026-04-20Added to CISA KEVCVE-2025-32975
QuestKACE Systems Management Appliance (SMA)
CISA KEV
fix due 2026-05-04Duration unknown
2026-04-20Added to CISA KEVCVE-2024-27199
JetBrainsTeamCity
CISA KEV
fix due 2026-05-04Duration unknown
Thu 16 Apr 2026· 1 change
2026-04-16Added to CISA KEVCVE-2026-34197
ApacheActiveMQ
CISA KEV
fix due 2026-04-30Duration unknown
Tue 14 Apr 2026· 2 changes
2026-04-14Added to CISA KEVCVE-2009-0238
MicrosoftOffice
CISA KEV
fix due 2026-04-28Duration unknown
2026-04-14Added to CISA KEVCVE-2026-32201
MicrosoftSharePoint Server
CISA KEV
fix due 2026-04-28Duration unknown
Mon 13 Apr 2026· 7 changes
2026-04-13Added to CISA KEVCVE-2012-1854
MicrosoftVisual Basic for Applications (VBA)
CISA KEV
fix due 2026-04-27Duration unknown
2026-04-13Added to CISA KEV
MicrosoftWindows
fix due 2026-04-27Duration unknown
2026-04-13same kind of change as the line aboveCVE-2025-60710same vendor as the line abovesame change as the line aboveDuration unknown
2026-04-13same kind of change as the line aboveCVE-2023-36424same vendor as the line abovesame change as the line aboveDuration unknown
2026-04-13Added to CISA KEVCVE-2023-21529
MicrosoftExchange Server
CISA KEV
fix due 2026-04-27Duration unknown
2026-04-13Added to CISA KEVCVE-2020-9715
AdobeAcrobat
CISA KEV
fix due 2026-04-27Duration unknown
2026-04-13Added to CISA KEVCVE-2026-21643
FortinetFortiClient EMS
CISA KEV
fix due 2026-04-16Duration unknown
2026-04-13Added to CISA KEVCVE-2026-34621
AdobeAcrobat and Reader
CISA KEV
fix due 2026-04-27Duration unknown
Wed 8 Apr 2026· 1 change
2026-04-08Added to CISA KEVCVE-2026-1340
IvantiEndpoint Manager Mobile (EPMM)
CISA KEV
fix due 2026-04-11Duration unknown
Mon 6 Apr 2026· 1 change
2026-04-06Added to CISA KEVCVE-2026-35616
FortinetFortiClient EMS
CISA KEV
fix due 2026-04-09Duration unknown
Thu 2 Apr 2026· 1 change
2026-04-02Added to CISA KEVCVE-2026-3502
TrueConfClient
CISA KEV
fix due 2026-04-16Duration unknown
Wed 1 Apr 2026· 1 change
2026-04-01Added to CISA KEVCVE-2026-5281
GoogleDawn
CISA KEV
fix due 2026-04-15Duration unknown
Mon 30 Mar 2026· 1 change
2026-03-30Added to CISA KEVCVE-2026-3055
CitrixNetScaler
CISA KEV
fix due 2026-04-02Duration unknown
Fri 27 Mar 2026· 1 change
2026-03-27Added to CISA KEVCVE-2025-53521
F5BIG-IP
CISA KEV
fix due 2026-03-30Duration unknown
Thu 26 Mar 2026· 1 change
2026-03-26Added to CISA KEVCVE-2026-33634CISA KEVfix due 2026-04-09Duration unknown
Wed 25 Mar 2026· 1 change
2026-03-25Added to CISA KEVCVE-2026-33017
LangflowLangflow
CISA KEV
fix due 2026-04-08Duration unknown
Fri 20 Mar 2026· 5 changes
2026-03-20Added to CISA KEVCVE-2025-32432
Craft CMSCraft CMS
CISA KEV
fix due 2026-04-03Duration unknown
2026-03-20Added to CISA KEVCVE-2025-54068
LaravelLivewire
CISA KEV
fix due 2026-04-03Duration unknown
2026-03-20Added to CISA KEV
AppleMultiple Products
fix due 2026-04-03Duration unknown
2026-03-20same kind of change as the line aboveCVE-2025-43510same vendor as the line abovesame change as the line aboveDuration unknown
2026-03-20same kind of change as the line aboveCVE-2025-43520same vendor as the line abovesame change as the line aboveDuration unknown
2026-03-20same kind of change as the line aboveCVE-2025-31277same vendor as the line abovesame change as the line aboveDuration unknown
Thu 19 Mar 2026· 1 change
2026-03-19Added to CISA KEVCVE-2026-20131
CiscoSecure Firewall Management Center (FMC)
CISA KEV
fix due 2026-03-22Duration unknown
Wed 18 Mar 2026· 2 changes
2026-03-18Added to CISA KEVCVE-2026-20963
MicrosoftSharePoint
CISA KEV
fix due 2026-03-21Duration unknown
2026-03-18Added to CISA KEVCVE-2025-66376
SynacorZimbra Collaboration Suite (ZCS)
CISA KEV
fix due 2026-04-01Duration unknown
Mon 16 Mar 2026· 1 change
2026-03-16Added to CISA KEVCVE-2025-47813
Wing FTP ServerWing FTP Server
CISA KEV
fix due 2026-03-30Duration unknown
Fri 13 Mar 2026· 2 changes
2026-03-13Added to CISA KEVCVE-2026-3910
GoogleChromium V8
CISA KEV
fix due 2026-03-27Duration unknown
2026-03-13Added to CISA KEVCVE-2026-3909
GoogleSkia
CISA KEV
fix due 2026-03-27Duration unknown
Wed 11 Mar 2026· 1 change
2026-03-11Added to CISA KEVCVE-2025-68613
n8nn8n
CISA KEV
fix due 2026-03-25Duration unknown
Mon 9 Mar 2026· 3 changes
2026-03-09Added to CISA KEVCVE-2021-22054
OmnissaWorkspace One UEM
CISA KEV
fix due 2026-03-23Duration unknown
2026-03-09Added to CISA KEVCVE-2025-26399
SolarWindsWeb Help Desk
CISA KEV
fix due 2026-03-12Duration unknown
2026-03-09Added to CISA KEVCVE-2026-1603
Ivanti Endpoint Manager (EPM)
CISA KEV
fix due 2026-03-23Duration unknown
Thu 5 Mar 2026· 5 changes
2026-03-05Added to CISA KEVCVE-2017-7921
HikvisionMultiple Products
CISA KEV
fix due 2026-03-26Duration unknown
2026-03-05Added to CISA KEVCVE-2021-22681
RockwellMultiple Products
CISA KEV
fix due 2026-03-26Duration unknown
2026-03-05Added to CISA KEV
AppleMultiple Products
fix due 2026-03-26Duration unknown
2026-03-05same kind of change as the line aboveCVE-2023-43000same vendor as the line abovesame change as the line aboveDuration unknown
2026-03-05same kind of change as the line aboveCVE-2021-30952same vendor as the line abovesame change as the line aboveDuration unknown
2026-03-05Added to CISA KEVCVE-2023-41974
AppleiOS and iPadOS
CISA KEV
fix due 2026-03-26Duration unknown
Tue 3 Mar 2026· 2 changes
2026-03-03Added to CISA KEVCVE-2026-22719
BroadcomVMware Aria Operations
CISA KEV
fix due 2026-03-24Duration unknown
2026-03-03Added to CISA KEVCVE-2026-21385
QualcommMultiple Chipsets
CISA KEV
fix due 2026-03-24Duration unknown
Thu 26 Feb 2026· 1 change
2026-02-26Ransomware use confirmedCVE-2026-23760
SmarterToolsSmarterMail
CISA KEV
stated at publication Unknown, now states KnownTime to revision 31 days
Wed 25 Feb 2026· 2 changes
2026-02-25Added to CISA KEVCVE-2022-20775
CiscoSD-WAN
CISA KEV
fix due 2026-02-27Duration unknown
2026-02-25Added to CISA KEVCVE-2026-20127
CiscoCatalyst SD-WAN Controller and Manager
CISA KEV
fix due 2026-02-27Duration unknown
Tue 24 Feb 2026· 1 change
2026-02-24Added to CISA KEVCVE-2026-25108CISA KEVfix due 2026-03-17Duration unknown
Fri 20 Feb 2026· 2 changes
2026-02-20Added to CISA KEV
RoundcubeWebmail
fix due 2026-03-13Duration unknown
2026-02-20same kind of change as the line aboveCVE-2025-49113same vendor as the line abovesame change as the line aboveDuration unknown
2026-02-20same kind of change as the line aboveCVE-2025-68461same vendor as the line abovesame change as the line aboveDuration unknown
Thu 19 Feb 2026· 1 change
2026-02-19Ransomware use confirmedCVE-2026-1731
BeyondTrustRemote Support (RS) and Privileged Remote Access (PRA)
CISA KEV
stated at publication Unknown, now states KnownTime to revision 6 days
Wed 18 Feb 2026· 2 changes
2026-02-18Added to CISA KEVCVE-2021-22175
GitLabGitLab
CISA KEV
fix due 2026-03-11Duration unknown
2026-02-18Added to CISA KEVCVE-2026-22769
DellRecoverPoint for Virtual Machines (RP4VMs)
CISA KEV
fix due 2026-02-21Duration unknown
Tue 17 Feb 2026· 2 changes
2026-02-17Added to CISA KEVCVE-2020-7796
SynacorZimbra Collaboration Suite
CISA KEV
fix due 2026-03-10Duration unknown
2026-02-17Added to CISA KEVCVE-2024-7694
TeamT5ThreatSonar Anti-Ransomware
CISA KEV
fix due 2026-03-10Duration unknown

Rows, not records: a moved fix version and an added product count once per product, every other kind once per record or advisory. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

What this page cannot see

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Paste your closed CVE tickets and see which of these changes hit them →