Security
CISA KEV Security Advisories
Advisory feed healthy
Source: healthy
Track recent CISA KEV security advisories, severity, exploit risk, affected products, and remediation information. DTMonitor checks the official source and clearly marks stale or unavailable data instead of assuming the service is healthy.
Active incidents
0
Incidents in 30 days
0
Last verified
Nov 10, 2026, 5:35 AM UTC
Recent CISA KEV incident history
Full historyCVE-2026-102895: GPUStack Improper Authentication Vulnerability
CISA KEV · Nov 9, 2026, 12:00 AM UTC · investigating
CVE-2026-116779: SignalWire FreeSwitch Code Injection Vulnerability
CISA KEV · Nov 9, 2026, 12:00 AM UTC · investigating
CVE-2026-123158: OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability
CISA KEV · Nov 9, 2026, 12:00 AM UTC · investigating
CVE-2026-123218: IBM Aspera Faspex Incorrect Authorization Vulnerability
CISA KEV · Nov 9, 2026, 12:00 AM UTC · investigating
CVE-2026-19868: SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
CISA KEV · Nov 6, 2026, 12:00 AM UTC · investigating
CVE-2024-27834: Apple Multiple Products Improper Authentication Vulnerability
CISA KEV · Nov 4, 2026, 12:00 AM UTC · investigating
CVE-2026-119977: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
CISA KEV · Nov 3, 2026, 12:00 AM UTC · active
CVE-2026-111357: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
CISA KEV · Oct 30, 2026, 12:00 AM UTC · active
CVE-2026-118527: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
CISA KEV · Oct 30, 2026, 12:00 AM UTC · investigating
CVE-2026-76418: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
CISA KEV · Oct 29, 2026, 12:00 AM UTC · active
CVE-2026-97229: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
CISA KEV · Oct 29, 2026, 12:00 AM UTC · active
CVE-2026-41709: Broadcom VMWare ESX Insufficient Logging Vulnerability
CISA KEV · Oct 28, 2026, 12:00 AM UTC · investigating
CVE-2026-46300: Linux Kernel Missing Initialization of a Variable Vulnerability
CISA KEV · Oct 28, 2026, 12:00 AM UTC · active
CVE-2026-111497: Google Brotli Unchecked Return Value Vulnerability
CISA KEV · Oct 27, 2026, 12:00 AM UTC · active
CVE-2026-48356: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
CISA KEV · Oct 27, 2026, 12:00 AM UTC · active
CVE-2026-109618: PHP Memory Corruption Vulnerability
CISA KEV · Oct 26, 2026, 12:00 AM UTC · active
CVE-2026-109619: PHP Stale Internal Request-State Vulnerability
CISA KEV · Oct 26, 2026, 12:00 AM UTC · active
CVE-2026-110447: Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
CISA KEV · Oct 23, 2026, 12:00 AM UTC · active
CVE-2026-114625: Arista VeloCloud Orchestrator SQL Injection Vulnerability
CISA KEV · Oct 23, 2026, 12:00 AM UTC · active
CVE-2026-106931: EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
CISA KEV · Oct 20, 2026, 12:00 AM UTC · active
Source information
Status information is attributed to the provider's official status page or feed. Source freshness is shown separately because an unreachable feed is not evidence that a service is operational.