Skip to main content

CISA adds six vulnerabilities to Known Exploited Vulnerabilities Catalog

3 companies named across 4 categories, one of 17 articles referencing Ivanti. Previous coverage: Netskope logging, Itential compliance, and AI infrastructure updates - Week of July 28, 2025 (Jul 2025).

Companies mentioned

Best suited for

Persona
Security Architect
Decision stage
How to start
Adoption curve
Early Majority

Our classification, not the publisher's statement. Best suited for, not only for.

CISA has included six new vulnerabilities in its Known Exploited Vulnerabilities (KEV) Catalog due to evidence of ongoing exploitation, impacting federal agencies.

Details of New Vulnerabilities

The latest additions to CISA's catalog include various vulnerabilities across different platforms, specifically affecting technologies from Ivanti, MDaemon, Srimax, Synacor, and ZKTeco. These newly identified vulnerabilities include:

These vulnerabilities serve as common attack vectors and are a potential risk for the federal sector.

Operational Directives

According to Binding Operational Directive (BOD) 22-01, CISA establishes the KEV Catalog to identify risks associated with CVEs for federal entities. FCEB agencies must remedy these vulnerabilities to secure their networks against active threats. Additional information can be found in the BOD 22-01 Fact Sheet.

CISA recommends that all organizations, regardless of federal affiliation, prioritize fixing catalog vulnerabilities promptly to minimize cyberattack risks. The agency will keep updating the catalog with new vulnerabilities as outlined in their criteria.

Blog post, originally published by Summary by StringerAI at decisioninsights.ai.

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/cisa-adds-six-vulnerabilities-to-known-exploited-vulnerabilities-catalog/",
        "name": "CISA adds six vulnerabilities to Known Exploited Vulnerabilities Catalog",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/cisa-adds-six-vulnerabilities-to-known-exploited-vulnerabilities-catalog/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
      "name": "Department of Homeland Security"
    },
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Architect"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Majority"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-coverage/#person",
      "@type": "Person",
      "name": "Decision Insights Coverage",
      "url": "https://decisioninsights.ai/author/decision-insights-coverage/"
    },
    "dateModified": "2026-08-23T12:30:19-06:00",
    "datePublished": "2025-08-20T14:38:44-06:00",
    "description": "CISA adds six vulnerabilities to its Known Exploited Vulnerabilities Catalog, urging prompt remediation for all organizations.",
    "headline": "CISA adds six vulnerabilities to Known Exploited Vulnerabilities Catalog",
    "isBasedOn": {
      "@type": "CreativeWork",
      "author": {
        "@type": "Person",
        "name": "Summary by StringerAI"
      },
      "url": "https://decisioninsights.ai/advisory/cisa-expands-known-exploited-vulnerabilities-catalog-with-new-entries/2025/05/"
    },
    "keywords": [
      "Binding Operational Directive",
      "Cross-Site Scripting",
      "Known Exploited Vulnerabilities",
      "Vulnerabilities"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/cisa-adds-six-vulnerabilities-to-known-exploited-vulnerabilities-catalog/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-23",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/",
        "name": "Cybersecurity and Infrastructure Security Agency (CISA)"
      },
      {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
        "name": "Department of Homeland Security"
      },
      {
        "@id": "https://decisioninsights.ai/registry/ivanti/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/ivanti/",
        "name": "Ivanti"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-coverage/#person",
    "@type": "Person",
    "description": "Blog posts, podcasts, and video analysis from across the industry, condensed into short, sourced summaries. Produced under our Standards & Methodology.",
    "name": "Decision Insights Coverage",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-coverage/"
  }
]

Is this your company? Get structured data for your own pages