#cisa-kev

CISA Orders Federal Agencies to Patch Windows Task Host Flaw

CISA added a Windows Task Host privilege escalation vulnerability to its Known Exploited Vulnerabilities catalog, requiring federal agencies to patch immediately.

CISA Warns: Critical SharePoint Flaw Under Active Attack

CISA adds critical Microsoft SharePoint vulnerability to its Known Exploited Vulnerabilities catalog after confirming active exploitation in the wild.

CISA Orders Federal Agencies to Patch Zimbra Zero-Day

CISA adds actively exploited Zimbra Collaboration Suite vulnerability to its Known Exploited Vulnerabilities catalog, mandating federal agency patches.

CISA Warns of Actively Exploited Wing FTP Server Flaw

CISA alerts federal agencies about an actively exploited Wing FTP Server vulnerability enabling remote code execution attacks.

CISA Orders Federal Agencies to Patch n8n RCE Flaw

CISA added an actively exploited n8n remote code execution vulnerability to its Known Exploited Vulnerabilities catalog, requiring federal agencies to patch by March 25.

CISA adds Ivanti EPM flaw to exploited vulnerabilities list

CISA ordered federal agencies to patch a high-severity Ivanti Endpoint Manager vulnerability within three weeks after confirming active exploitation.

CISA Adds Hikvision, Rockwell Flaws to KEV Catalog

CISA added two actively exploited vulnerabilities affecting Hikvision and Rockwell Automation products to its Known Exploited Vulnerabilities catalog on March 6.