# The CISA KEV catalog: vulnerabilities actually being exploited

Source: https://libwatch.com/en/glossary/cisa-kev

Glossary · CISA KEV

The official US list of vulnerabilities that have been seen exploited.

Updated October 22, 2026 · 3-minute read

In one sentence

KEV (Known Exploited Vulnerabilities) is the catalog, maintained by CISA, of vulnerabilities whose real-world exploitation is confirmed.

## Why it matters

A vulnerability in the catalog is no longer theoretical: attackers are using it. It should [go to the top of the list](/en/features/prioritization).

## How it changes

[The catalog](https://www.cisa.gov/known-exploited-vulnerabilities-catalog) is updated continuously. A vulnerability known for months can be added overnight.

## And LibWatch?

LibWatch flags vulnerabilities from the KEV catalog, lets you filter on them, and can [notify you](/en/features/nightly-watch) when a vulnerability in your projects is added to it.

## See also

- Glossary
### [EPSS](/en/glossary/epss)

The likelihood of exploitation.

- Glossary
### [CERT-FR](/en/glossary/cert-fr)

Alerts from ANSSI.

- Glossary
### [SCA](/en/glossary/sca)

Composition analysis.

## See which of your vulnerabilities are being exploited.

[Try it for 14 days](https://app.libwatch.com/users/sign_up?source=glossary_cisa-kev)