THE CISA maintains a **Known Exploited Vulnerabilities (KEV) Catalog** to support organizations in managing cybersecurity threats. The catalog lists vulnerabilities actively exploited in the wild, serving as a critical resource for vulnerability management prioritization. Before using the catalog, users are encouraged to learn more about its application. The catalog also allows users to nominate previously unlisted vulnerabilities.
Currently, it features a notable vulnerability: **CVE-2015-5287**, which affects the Red Hat Automatic Bug Reporting Tool, enabling privilege escalation via a symlink attack. Users are urged to discontinue using old or unsupported versions and follow vendor instructions for mitigation while adhering to CISA’s guidance on prioritizing security updates.