cisa-kev
CISA KEVExtracts: CVE id, vendor, due date · metadata or bounded excerpt
Retention: D1 event history with canonical source link and deduplication metadata.
Access basis: Public endpoint; no project credential required.
Last ingested: 2026-08-26 · run status: success with data
CVE: CVE-2026-16812 Vendor/project: Arista Product: VeloCloud Orchestrator Known ransomware campaign use: Unknown Due date: 2026-07-30 CWE: CWE-78 Arista VeloCloud Orchestrator On-Prem contains an OS command injection vulnerability that may allow a remote attacker to access privi
CVE: CVE-2025-68686 Vendor/project: Fortinet Product: FortiOS Known ransomware campaign use: Unknown Due date: 2026-08-10 CWE: CWE-200 Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated at