THE Known Exploited Vulnerabilities (KEV) Catalog, maintained by CISA, serves as an authoritative resource for identifying vulnerabilities actively exploited in the wild, aimed at assisting organizations in managing vulnerabilities and threat activities. The catalog can be integrated into vulnerability management frameworks, helping prioritize risk mitigation efforts.
The catalog currently lists CVE-2026-20230, which identifies a server-side request forgery (SSRF) vulnerability in Cisco Unified Communications Manager that may allow unauthenticated remote attackers to write files to the operating system. Users are encouraged to take practical mitigations as per vendor guidelines and follow CISA's BOD 26-04 recommendations for security updates based on risk. The catalog can be accessed in various formats, including CSV and JSON.