Topic

Vulnerability Disclosure and Identification

The systems that name and publish software flaws, including CVE identifiers, numbering authorities and the databases that enrich published records.

Current clusters

security1 publisher

CISA updates KEV catalog page to reference new directive BOD 26-04

The directive issued June 10, 2026 keeps the KEV catalog's three inclusion criteria and folds federal remediation deadlines into a wider patching timeline. Any policy that cites BOD 22-01 now names a superseded authority.

Publishers:cisa.gov

Reality

Evidence70
Adoption: Insufficient
Hype gap+10
Incentives40
Confidence62