cisa-kev
CISA KEVExtracts: CVE id, vendor, due date · metadata or bounded excerpt
Retention: D1 event history with canonical source link and deduplication metadata.
Access basis: Public endpoint; no project credential required.
Last ingested: 2026-08-25 · run status: success with data
CVE: CVE-2026-72898 Vendor/project: Metabase Product: Metabase Known ransomware campaign use: Unknown Due date: 2026-08-14 CWE: CWE-89 Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase applicat
CVE: CVE-2026-68820 Vendor/project: Microsoft Product: Windows Ancillary Function Driver for WinSock Known ransomware campaign use: Unknown Due date: 2026-08-25 CWE: CWE-416 Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allow
CVE: CVE-2026-20349 Vendor/project: Cisco Product: Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Known ransomware campaign use: Unknown Due date: 2026-08-14 CWE: CWE-244 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secur