CISA KEV
-
CVE Tracking in 2026: Prioritize When NVD Stops Scoring
NIST moved the NVD to a triage model in April 2026. Here is what CVE tracking and patch prioritization look like when most records never get scored.
-
Cisco SD-WAN Flaw: CISA Emergency Directive 26-03
CVE-2026-20182 is a maximum-severity authentication bypass in Cisco Catalyst SD-WAN, added to CISA's KEV catalog on May 14 amid active exploitation.
-
May 2026 Security Roundup: Cisco, Exchange, and Exim
The May 2026 security roundup covers exploited Cisco SD-WAN and Exchange flaws, a critical Exim bug, NGINX and Defender issues, and Patch Tuesday.