CISA Known Exploited Vulns

CISA (DHS)

About this Data Source

The CISA Known Exploited Vulnerabilities (KEV) catalog lists software vulnerabilities that are actively being exploited in the wild. Federal agencies are legally required to remediate KEV entries within specified deadlines under BOD 22-01. The catalog is maintained by CISA (Cybersecurity and Infrastructure Security Agency) within the U.S. Department of Homeland Security.

Operator

CISA (Cybersecurity and Infrastructure Security Agency, DHS)

License

Open

Registration

None

Cost

Free — U.S. government cybersecurity resource

Feed Details

Endpoint

https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json

API Type

Static JSON

Provider

CISA (DHS)

Coverage

Global

Refresh Rate

5 min

Documentation

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

How this feed contributes to OVIX

Ransomware=9, Active Exploit=7

cyber

7.0/10

Live Health

Status

🟢 LIVE

Events (24h)

Events (1h)

Last Ingested

<1 min ago

Avg Severity

7.0

Max Severity

View Cyber Threat Dashboard →← All Data Sources

Discussions coming soon — this feed is powered by the ROC operational platform.