THE CISA's Known Exploited Vulnerabilities (KEV) Catalog serves as a critical resource for the cybersecurity community, providing an authoritative source of vulnerabilities actively exploited in the wild. Organizations are encouraged to use the KEV catalog to enhance their vulnerability management strategies. A current example in the catalog is CVE-2026-20253, a vulnerability in Splunk Enterprise that lacks authentication for a critical function, allowing unauthenticated users to manipulate files.
The catalog also offers various formats for access, including CSV and JSON, and provides links for further information and subscriptions to updates.