Known Exploited Vulnerabilities Catalog - CISA
Jun 25, 2024 · This vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted …
Cybersecurity Alerts & Advisories - CISA
Feb 10, 2026 · Alerts typically include information on newly exploited or disclosed vulnerabilities, newly discovered cyber threat campaigns, severe denial-of-service events or widespread outages, or …
2025 CWE Top 25 Most Dangerous Software Weaknesses - CISA
Dec 11, 2025 · The Cybersecurity and Infrastructure Security Agency (CISA), in collaboration with the Homeland Security Systems Engineering and Development Institute (HSSEDI), operated by the …
Cyber Threats and Response | Cybersecurity and Infrastructure Security ...
Nov 12, 2025 · CISA diligently tracks and shares information about the latest cybersecurity risks, attacks, and vulnerabilities, providing our nation with the tools and resources needed to defend …
Redirecting to https://www.cisa.gov/news …
Feb 10, 2026 · Redirecting to https://www.cisa.gov/news-events/alerts/2026/02/10/cisa-adds-six-known-exploited-vulnerabilities-catalog.
CISA Presents Vision for the Common Vulnerabilities and Exposures …
Sep 10, 2025 · In collaboration with the global cybersecurity community, CISA is committed to delivering a well-governed, trusted, and responsive CVE Program aimed to enhance the quality of vulnerability …
Coordinated Vulnerability Disclosure Program - CISA
This document recommends guidance for establishing a federal vulnerability disclosure framework, properly handling vulnerability reports, and communicating the mitigation and/or remediation of …
Vulnerability Management - CISA
MISSION: Reduce the prevalence and impact of vulnerabilities and exploitable conditions across enterprises and technologies, including through assessments and coordinated disclosure of …
Microsoft Releases Out-of-Band Security Update to Mitigate ... - CISA
Oct 29, 2025 · Microsoft released an update to address a critical remote code execution vulnerability impacting Windows Server Update Service (WSUS) in Windows Server (2012, 2016, 2019, 2022, …
CISA Adds Five Known Exploited Vulnerabilities to Catalog
Jan 26, 2026 · CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.