CISA KEV
Known Exploited Vulnerabilities
The KEV catalogue contains vulnerabilities for which CISA has established actual exploitation, with a mandatory remediation deadline for US federal agencies and a strong recommendation for all organisations.
201
Entries
KEV data: live connection— last retrieved: 8 November 2026 at 16:58.
KEV means there is evidence of actual exploitation. A high CVSS score alone does not demonstrate this — see the methodology page for the difference between CVE, KEV and CVSS.
201 KEV entries
Added on
28 October 2026
Remediation due
31 October 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
27 October 2026
Remediation due
10 November 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
26 October 2026
Remediation due
29 October 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
26 October 2026
Remediation due
29 October 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
20 October 2026
Remediation due
3 November 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
16 October 2026
Remediation due
19 October 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
14 October 2026
Remediation due
17 October 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
14 October 2026
Remediation due
17 October 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
13 October 2026
Remediation due
16 October 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
1 October 2026
Remediation due
4 October 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
24 September 2026
Remediation due
27 September 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
22 September 2026
Remediation due
25 September 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
22 September 2026
Remediation due
25 September 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
18 September 2026
Remediation due
21 September 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
14 September 2026
Remediation due
17 September 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
9 September 2026
Remediation due
12 September 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
8 September 2026
Remediation due
22 September 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
8 September 2026
Remediation due
22 September 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
27 August 2026
Remediation due
30 August 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
21 August 2026
Remediation due
24 August 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
11 August 2026
Remediation due
25 August 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
27 July 2026
Remediation due
10 August 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
22 July 2026
Remediation due
25 July 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
16 July 2026
Remediation due
19 July 2026
Ransomware use
unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Added on
6 May 2026
Remediation due
9 May 2026
Ransomware use
unknown
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Until the vendor releases an official fix, the following workaround should be implemented: - Restrict User-ID Authentication Portal access to only trusted zones. - Disable User-ID Authentication Portal if not required. 5/13/2026: Palo Alto has released a variety of patches. If these are relevant to your environment, please apply the designated patch.
Added on
8 January 2025
Remediation due
15 January 2025
Ransomware use
confirmed
Required action: Apply mitigations as set forth in the CISA instructions linked below to include conducting hunt activities, taking remediation actions if applicable, and applying updates prior to returning a device to service.
Added on
26 June 2024
Remediation due
17 July 2024
Ransomware use
unknown
Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Added on
13 June 2024
Remediation due
4 July 2024
Ransomware use
confirmed
Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Added on
11 July 2023
Remediation due
1 August 2023
Ransomware use
unknown
Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Added on
11 July 2023
Remediation due
1 August 2023
Ransomware use
unknown
Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Added on
11 July 2023
Remediation due
1 August 2023
Ransomware use
unknown
Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Added on
22 June 2023
Remediation due
13 July 2023
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
26 May 2023
Remediation due
16 June 2023
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
9 May 2023
Remediation due
30 May 2023
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
1 May 2023
Remediation due
22 May 2023
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
11 April 2023
Remediation due
2 May 2023
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
7 April 2023
Remediation due
28 April 2023
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
14 March 2023
Remediation due
4 April 2023
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
21 February 2023
Remediation due
14 March 2023
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
21 February 2023
Remediation due
14 March 2023
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
14 February 2023
Remediation due
7 March 2023
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
14 February 2023
Remediation due
7 March 2023
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
10 January 2023
Remediation due
31 January 2023
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
14 November 2022
Remediation due
9 December 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
8 November 2022
Remediation due
9 December 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
8 November 2022
Remediation due
9 December 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
8 November 2022
Remediation due
9 December 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
8 November 2022
Remediation due
9 December 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
11 October 2022
Remediation due
1 November 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
15 September 2022
Remediation due
6 October 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
14 September 2022
Remediation due
5 October 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
25 August 2022
Remediation due
15 September 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 August 2022
Remediation due
15 September 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
18 August 2022
Remediation due
8 September 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
9 August 2022
Remediation due
30 August 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
12 July 2022
Remediation due
2 August 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
1 July 2022
Remediation due
22 July 2022
Ransomware use
unknown
Required action: Apply remediation actions outlined in CISA guidance [https://www.cisa.gov/guidance-applying-june-microsoft-patch].
Added on
14 June 2022
Remediation due
5 July 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
8 June 2022
Remediation due
22 June 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 May 2022
Remediation due
15 June 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 May 2022
Remediation due
15 June 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 May 2022
Remediation due
15 June 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 May 2022
Remediation due
15 June 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 May 2022
Remediation due
15 June 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 May 2022
Remediation due
15 June 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 May 2022
Remediation due
15 June 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 May 2022
Remediation due
15 June 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
24 May 2022
Remediation due
14 June 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
24 May 2022
Remediation due
14 June 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
24 May 2022
Remediation due
14 June 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
24 May 2022
Remediation due
14 June 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
23 May 2022
Remediation due
13 June 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
23 May 2022
Remediation due
13 June 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
23 May 2022
Remediation due
13 June 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
23 May 2022
Remediation due
13 June 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
23 May 2022
Remediation due
13 June 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
23 May 2022
Remediation due
13 June 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
16 May 2022
Remediation due
6 June 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
4 May 2022
Remediation due
25 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 April 2022
Remediation due
16 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 April 2022
Remediation due
16 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 April 2022
Remediation due
16 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 April 2022
Remediation due
16 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 April 2022
Remediation due
16 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 April 2022
Remediation due
16 May 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
19 April 2022
Remediation due
10 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
15 April 2022
Remediation due
6 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
13 April 2022
Remediation due
4 May 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
11 April 2022
Remediation due
2 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
6 April 2022
Remediation due
27 April 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
6 April 2022
Remediation due
27 April 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
6 April 2022
Remediation due
27 April 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
31 March 2022
Remediation due
21 April 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
28 March 2022
Remediation due
18 April 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
28 March 2022
Remediation due
18 April 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
28 March 2022
Remediation due
18 April 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
28 March 2022
Remediation due
18 April 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
28 March 2022
Remediation due
18 April 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
28 March 2022
Remediation due
18 April 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
28 March 2022
Remediation due
18 April 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
28 March 2022
Remediation due
18 April 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
28 March 2022
Remediation due
18 April 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
28 March 2022
Remediation due
18 April 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
28 March 2022
Remediation due
21 April 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 March 2022
Remediation due
15 April 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
25 March 2022
Remediation due
15 April 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
25 March 2022
Remediation due
15 April 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 March 2022
Remediation due
15 April 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 March 2022
Remediation due
15 April 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
25 March 2022
Remediation due
15 April 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 March 2022
Remediation due
15 April 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 March 2022
Remediation due
15 April 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 March 2022
Remediation due
15 April 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 March 2022
Remediation due
15 April 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
15 March 2022
Remediation due
5 April 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
15 March 2022
Remediation due
5 April 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
15 March 2022
Remediation due
5 April 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
15 March 2022
Remediation due
5 April 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
15 March 2022
Remediation due
5 April 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
15 March 2022
Remediation due
5 April 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
15 March 2022
Remediation due
5 April 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
15 March 2022
Remediation due
5 April 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
15 March 2022
Remediation due
5 April 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
15 March 2022
Remediation due
5 April 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
15 March 2022
Remediation due
5 April 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
15 March 2022
Remediation due
5 April 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
15 March 2022
Remediation due
5 April 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
15 March 2022
Remediation due
5 April 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
3 March 2022
Remediation due
17 March 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
3 March 2022
Remediation due
17 March 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 March 2022
Remediation due
24 March 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 March 2022
Remediation due
24 March 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 March 2022
Remediation due
24 March 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 March 2022
Remediation due
24 March 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 March 2022
Remediation due
24 March 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
3 March 2022
Remediation due
24 March 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 March 2022
Remediation due
24 March 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
3 March 2022
Remediation due
24 March 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 March 2022
Remediation due
24 March 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 March 2022
Remediation due
24 March 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 March 2022
Remediation due
24 March 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 March 2022
Remediation due
24 March 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 March 2022
Remediation due
24 March 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 March 2022
Remediation due
24 March 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
25 February 2022
Remediation due
25 August 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
15 February 2022
Remediation due
15 August 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
10 February 2022
Remediation due
24 February 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
10 February 2022
Remediation due
10 August 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
10 February 2022
Remediation due
10 August 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
10 February 2022
Remediation due
10 August 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
10 February 2022
Remediation due
10 August 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
10 February 2022
Remediation due
10 August 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
10 February 2022
Remediation due
10 August 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
4 February 2022
Remediation due
18 February 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
28 January 2022
Remediation due
28 July 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
21 January 2022
Remediation due
21 July 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
10 January 2022
Remediation due
10 July 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
10 January 2022
Remediation due
10 July 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
10 January 2022
Remediation due
10 July 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
15 December 2021
Remediation due
29 December 2021
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
10 December 2021
Remediation due
24 December 2021
Ransomware use
confirmed
Required action: For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.
Added on
17 November 2021
Remediation due
1 December 2021
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
17 November 2021
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
17 November 2021
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
17 November 2021
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
17 November 2021
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
17 November 2021
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
17 November 2021
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
17 November 2021
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
17 November 2021
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
17 November 2021
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
17 November 2021
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
17 November 2021
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
17 November 2021
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
17 November 2021
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
17 November 2021
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
17 November 2021
Ransomware use
confirmed
Required action: Apply updates per vendor instructions.
Added on
3 November 2021
Remediation due
3 May 2022
Ransomware use
unknown
Required action: Apply updates per vendor instructions.