Tag
KEV
4 articles tagged “KEV”.
-
Ivanti Connect Secure CVE-2026-104935: Patching Is Not Recovery
CVE-2026-104935 hit Ivanti Connect Secure with a 3-day KEV deadline, a missed integrity check and an unpatched third bug. A change plan beyond the patch.
-
BOD 26-04: Pre-Wire Your Emergency Change Before the Clock
CISA's BOD 26-04 sets a 16-row deadline table. Here is how a CAB pre-authorizes the ECAB so a 3-day KEV clock never catches you improvising.
-
The 3-Day KEV Clock: A CAB Runbook for CVE-2026-8037
CISA gave Progress LoadMaster CVE-2026-8037 a three-day deadline. How a change advisory board runs an emergency change against that clock.
-
CISA BOD 26-04: Risk-Based Patch Deadlines for CABs
CISA BOD 26-04 replaces the flat 14-day KEV clock with 3, 14, and 60-day risk-based deadlines. What change managers and CABs must rebuild by December.