{
  "source": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
  "catalogUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
  "fetchedAt": "2026-10-31T03:54:28.266Z",
  "catalogVersion": "2026.10.30",
  "dateReleased": "2026-10-30T17:02:45.3665Z",
  "population": "All entries in the downloaded CISA Known Exploited Vulnerabilities catalog, not all CVEs or current attacks",
  "total": 1766,
  "latestAddedDate": "2026-10-30",
  "addedOnLatestDate": 2,
  "latest": [
    {
      "cveID": "CVE-2026-118527",
      "vendorProject": "Ivanti",
      "product": "Connect Secure",
      "vulnerabilityName": "Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability",
      "dateAdded": "2026-10-30",
      "dueDate": "2026-11-13",
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."
    },
    {
      "cveID": "CVE-2026-111357",
      "vendorProject": "Ivanti",
      "product": "Connect Secure",
      "vulnerabilityName": "Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability",
      "dateAdded": "2026-10-30",
      "dueDate": "2026-11-02",
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines."
    }
  ],
  "refresh": "Static snapshot captured during publication; no automatic refresh claimed"
}