cisa kev

The latest CISA KEV update is a reminder that some of the most dangerous vulnerabilities are not necessarily the most complicated—they are the ones that security teams already know how to classify, but still struggle to contain quickly. On March 19, 2026, CISA added CVE-2026-20131 to its Known...

CISA has added CVE-2025-68613 — a critical remote code execution (RCE) vulnerability in the n8n workflow automation platform — to its Known Exploited Vulnerabilities (KEV) Catalog, citing evidence of active exploitation and triggering mandatory remediation requirements for affected federal...

Cisco SD‑WAN users woke up to a coordinated, high‑urgency warning on February 25, 2026: U.S. and allied cyber agencies have confirmed active exploitation of critical vulnerabilities in Cisco Catalyst SD‑WAN products and have issued prescriptive guidance — including a U.S. Emergency Directive for...

CISA’s addition of CVE-2026-20045 to the Known Exploited Vulnerabilities (KEV) Catalog on January 21, 2026 elevates a code-injection flaw in Cisco’s Unified Communications portfolio from a vendor advisory to an operational emergency for federal agencies — and a high-priority remediation item for...