Glossary
KEV
Known Exploited Vulnerabilities — A catalog maintained by CISA of vulnerabilities confirmed to have been actively exploited in the wild, along with mandated remediation deadlines for U.S. federal civilian agencies. Because inclusion requires evidence of real-world exploitation rather than theoretical risk, the KEV catalog is widely used across the industry as a prioritization signal beyond CVSS score alone.
// Recent coverage mentioning KEV
CVE-2026-50522: SharePoint RCE via Deserialization — Patch Now
CISA confirmed active exploitation of CVE-2026-50522 in Microsoft SharePoint. Attackers leverage a deserialization vulnerability to execute code remotely. Patch…
CVE-2026-60137: WordPress Core SQL Injection to RCE — Patch Now
CISA warns of active exploitation for CVE-2026-60137, a WordPress Core SQL Injection vulnerability chaining to RCE for unauthenticated attackers.
CVE-2026-16232: Check Point SmartConsole Admin Bypass via Auth Flaw
CISA warns of active exploitation for CVE-2026-16232, an improper authentication vulnerability in Check Point SmartConsole allowing unauthenticated admin access…
CISA KEV Update: Five Actively Exploited CVEs in Apple, Hikvision, Rockwell
CISA adds five actively exploited vulnerabilities, including Apple iOS/iPadOS use-after-free and Hikvision improper authentication, to its KEV Catalog.