Real-time global intelligence

© 2026 OpenWatch. All rights reserved.

Proudly using no third-party tracking

Illustrative, not investment advice. OpenWatch aggregates public signals for research and information only — it is not personalized financial, legal, or tax advice, and nothing here is a recommendation to buy or sell any security.

Platform

Brief
Signals
Cascade
Trajectories
Wagers
Track Record
Countries
Companies
Industries
Themes
Rankings

Tools

Globe
Analytics
Crises
Clusters
Supply Chain
Alliances
Screener
Watchlist
Portfolio

Developer

Status

Sources

View all sources →

1,000+ tracked sources

Signals updated every 15 minutes

Not investment advice. OpenWatch is provided for informational and entertainment purposes only. While we strive for accuracy, precision, and source attribution in all intelligence assessments, geopolitical analysis involves inherent uncertainty and our conclusions may be incomplete, delayed, or incorrect. Nothing on this platform constitutes financial, investment, legal, or professional advice of any kind. Forward-looking scenarios and probability estimates are analytical hypotheses — not independently validated forecasts. Any actions taken based on information found here are solely your responsibility. Always consult a qualified financial advisor before making investment decisions. Past signal patterns do not guarantee future outcomes.

Methodology
Privacy Policy
Terms of Use

openwatch.io

v·eed287a

Search

Congressional trades, bills, prediction markets, hearings, and intelligence signals. Signal search supports: AND OR "exact phrase" -exclude

Keywords

Threat Layer

Military Cyber Economic Disaster Political Criminal Health Supply Chain

Signal Type

Any Crisis Update Resolution

Region

Country

Min. Severity

Any ≥ 3 ≥ 5 ≥ 7 ≥ 9

Date Range

Clear all filters

Sort by

Severity Newest Relevance

↓Export CSV (requires API key)

Congress & Markets0 trades · 0 bills · 0 markets · 0 hearings

Found 66 results across signals (66)

No results in congress & markets for “Known Exploited Vulnerabilities”

Themes:🧠AI Chip Bottleneck 🛡US Defense Surge 🔌Taiwan Semiconductor Risk

66 signals for "Known Exploited Vulnerabilities" · Cyber

Page 1 of 3

Update

63d ago

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2024-1708 (ConnectWise ScreenConnect Path Traversal) and CVE-2026-32202 (Microsoft Windows Protection Mechanism Failure). CISA urges all organizations to prioritize timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practices, as these represent significant active threats to enterprise security.

8.2/10·CISA Current Activity

Primary Source ↗Details →

CyberUpdate66d ago

CISA added four vulnerabilities to its Known Exploited Vulnerabilities catalog on Friday, including CVE-2024-57726 (CVSS 9.9), a missing authorization vulnerability affecting SimpleHelp, Samsung MagicINFO 9 Server, and D-Link DIR-823X series routers. These vulnerabilities are currently being actively exploited in the wild.

8.2/10·The Hacker News

Primary Source ↗Details →

CyberUpdate67d ago

CISA has added four newly exploited vulnerabilities to its Known Exploited Vulnerabilities Catalog: CVE-2024-7399 (Samsung MagicINFO path traversal), CVE-2024-57726 (SimpleHelp missing authorization), CVE-2024-57728 (SimpleHelp path traversal), and CVE-2025-29635 (D-Link DIR-823X command injection). CISA urges all organizations to prioritize remediation of these vulnerabilities as part of vulnerability management practices to reduce exposure to active cyberattacks.

8.2/10·CISA Current Activity

Primary Source ↗Details →

CyberUpdate95d ago

CISA added CVE-2025-53521 (F5 BIG-IP Remote Code Execution) to the Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. This vulnerability is subject to BOD 22-01 remediation requirements for Federal Civilian Executive Branch agencies, and CISA urges all organizations to prioritize patching as part of vulnerability management practices.

8.2/10·CISA Current Activity

Primary Source ↗Details →

CyberCrisis69d ago

CISA has added CVE-2026-33825, a Microsoft Defender Insufficient Granularity of Access Control Vulnerability, to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. This vulnerability type is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. CISA urges all organizations to prioritize remediation of KEV Catalog vulnerabilities as part of their vulnerability management practices.

7.8/10·CISA Current Activity

Primary Source ↗Details →

CyberUpdate113d ago

CISA added three actively exploited vulnerabilities to its Known Exploited Vulnerabilities Catalog: CVE-2021-22054 (Omnissa Workspace ONE SSRF), CVE-2025-26399 (SolarWinds Web Help Desk deserialization flaw), and CVE-2026-1603 (Ivanti EPM authentication bypass). Federal agencies must remediate these vulnerabilities per BOD 22-01, while CISA urges all organizations to prioritize remediation as part of vulnerability management practices.

7.8/10·CISA Current Activity

Primary Source ↗Details →

CyberUpdate60d ago

CISA added CVE-2026-31431, a Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability, to its Known Exploited Vulnerabilities Catalog based on active exploitation evidence. Federal agencies must remediate this vulnerability per Binding Operational Directive 22-01, and CISA urges all organizations to prioritize remediation as part of vulnerability management practices.

7.5/10·CISA Current Activity

Primary Source ↗Details →

CyberCrisis61d ago

CISA added CVE-2026-41940, a missing authentication vulnerability in WebPros cPanel & WHM and WP2 (WordPress Squared), to its Known Exploited Vulnerabilities Catalog based on active exploitation evidence. The vulnerability is classified as a critical function bypass and represents a frequent attack vector for malicious actors. CISA urges all organizations to prioritize remediation as part of their vulnerability management practices, with federal agencies required to remediate by applicable due dates under BOD 22-01.

7.5/10·CISA Current Activity

Primary Source ↗Details →

CyberUpdate68d ago

CISA has added CVE-2026-39987 (Marimo Remote Code Execution Vulnerability) to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. Federal agencies are required to remediate by established deadlines under BOD 22-01, while CISA urges all organizations to prioritize remediation of KEV Catalog vulnerabilities as part of their vulnerability management practices.

7.5/10·CISA Current Activity

Primary Source ↗Details →

CyberCrisis🇲🇱Mali5d ago

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation.   CVE-2026-12569 PTC Windchill and FlexPLM Improper Input Validation Vulnerability CVE-2026-20230 Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies.

5.5/10·CISA Current Activity

Primary Source ↗Details →

CyberCrisis🇲🇱Mali7d ago

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation.   CVE-2025-67038 Lantronix EDS5000 Code Injection Vulnerability CVE-2026-34908 Ubiquiti UniFi OS Improper Access Control Vulnerability CVE-2026-34909 Ubiquiti UniFi OS Path Traversal Vulnerability CVE-2026-34910 Ubiquiti UniFi OS Improper Input Validation Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies.

5.5/10·CISA Current Activity

Primary Source ↗Details →

CyberCrisis🇲🇱Mali12d ago

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-20253 Splunk Enterprise Missing Authentication for Critical Function Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies, updating BOD 22-01 .

5.5/10·CISA Current Activity

Primary Source ↗Details →

CyberCrisis🇲🇱Mali14d ago

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-48907 Widget Factory Joomla Content Editor Improper Access Control Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies, updating BOD 22-01 .

5.5/10·CISA Current Activity

Primary Source ↗Details →

CyberCrisis🇲🇱Mali15d ago

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-20262 Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability CVE-2026-54420 LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.  Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies, updating BOD 22-01 . BOD 26-04 reinforces the importance of the KEV catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA’s Known Exploited Vulnerabilities (KEV) catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities.

5.5/10·CISA Current Activity

Primary Source ↗Details →

CyberCrisis🇲🇱Mali18d ago

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-35273 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies, updating BOD 22-01 .

5.5/10·CISA Current Activity

Primary Source ↗Details →

CyberCrisis🇲🇱Mali19d ago

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-10520 Ivanti Sentry OS Command Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies, updating BOD 22-01 .

5.5/10·CISA Current Activity

Primary Source ↗Details →

CyberUpdate🇺🇸United States 🇲🇱Mali32d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-0257, a Palo Alto Networks PAN-OS authentication bypass flaw, to its Known Exploited Vulnerabilities Catalog after confirming active exploitation in the wild. Federal agencies are required to remediate the vulnerability by a deadline set under binding directive BOD 22-01, while CISA recommends all organizations prioritize patching to protect against ongoing attacks.

5.5/10·CISA Current Activity

Primary Source ↗Details →

CyberUpdate🇺🇸United States 🇲🇱Mali35d ago

CISA added CVE-2026-48172, a privilege escalation flaw in the LiteSpeed cPanel plugin, to its Known Exploited Vulnerabilities catalog after detecting active exploitation. Federal agencies are required to patch the vulnerability under Binding Operational Directive 22-01; CISA recommends all organizations prioritize remediation as part of their vulnerability management.

5.5/10·CISA Current Activity

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali54d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a vulnerability in Ivanti Endpoint Manager Mobile to its catalog of known exploited vulnerabilities, citing active exploitation in the wild. The flaw allows improper input validation and poses significant risk to federal networks and critical infrastructure; federal agencies are required to remediate by specified deadlines.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali55d ago

The US Cybersecurity and Infrastructure Security Agency (CISA) has added a Palo Alto Networks PAN-OS vulnerability (CVE-2026-0300) to its Known Exploited Vulnerabilities Catalog, indicating the flaw is being actively exploited by malicious actors. Federal agencies must remediate the vulnerability under Binding Operational Directive 22-01, and CISA urges all organizations to prioritize patching as part of their vulnerability management.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States58d ago

The U.S. Cybersecurity and Infrastructure Security Agency added CVE-2026-31431, a local privilege escalation flaw impacting various Linux distributions, to its catalog of known exploited vulnerabilities after detecting active exploitation in the wild. The vulnerability carries a CVSS score of 7.8.

5.5/10·The Hacker News

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali71d ago

The Cybersecurity and Infrastructure Security Agency (CISA) has added eight newly discovered vulnerabilities showing evidence of active exploitation to its Known Exploited Vulnerabilities Catalog. The vulnerabilities span multiple critical systems including PaperCut NG/MF, JetBrains TeamCity, Kentico Xperience, Quest KACE, Zimbra Collaboration Suite, and Cisco Catalyst SD-WAN Manager, affecting authentication, path traversal, and information disclosure. Federal agencies are required to remediate these vulnerabilities by specified deadlines under Binding Operational Directive 22-01, and CISA urges all organizations to prioritize patching as part of their vulnerability management strategy.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali75d ago

The Cybersecurity and Infrastructure Security Agency (CISA) has added Apache ActiveMQ's CVE-2026-34197 improper input validation vulnerability to its Known Exploited Vulnerabilities Catalog, citing evidence of active exploitation in the wild. Federal agencies are required to remediate the flaw under Binding Operational Directive 22-01, and CISA is urging all organizations to prioritize patching as part of vulnerability management practices.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali77d ago

The US Cybersecurity and Infrastructure Security Agency (CISA) added two Microsoft vulnerabilities to its catalog of known exploited vulnerabilities based on evidence of active attacks. A remote code execution flaw in Microsoft Office (CVE-2009-0238) and an improper input validation vulnerability in SharePoint Server (CVE-2026-32201) are now listed as actively exploited by threat actors. Federal civilian agencies must remediate these by mandatory deadlines; CISA is urging all organizations to prioritize patching as part of routine vulnerability management.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberUpdate🇺🇸United States 🇲🇱Mali78d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added seven newly exploited vulnerabilities to its Known Exploited Vulnerabilities Catalog, including flaws in Microsoft Windows, Exchange Server, and Adobe Acrobat. Federal agencies are required to patch these vulnerabilities under Binding Operational Directive 22-01, though CISA is urging all organizations to prioritize remediation given active exploitation in the wild.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →