Skip to content
feed: live
0dayNews
$ track-record

Were we right, and were we early?

Any tracker can mirror CISA's KEV catalog after the fact. This page checks whether our own reporting existed before CISA's official confirmation — computed directly from our publish dates against CISA's listing dates, not asserted. The query that generates this page is public; see the methodology note below.

97%
of qualifying CVEs covered before or on CISA's KEV date
139
hand-written CVE entries now confirmed KEV

Fastest calls on record

CVEEditorWe publishedCISA listed KEVLead time
CVE-2026-111357+ Patch & DefenseOctober 30, 2026October 30, 2026same day
CVE-2026-118527+ Patch & DefenseOctober 30, 2026October 30, 2026same day
CVE-2026-76418+ Patch & DefenseOctober 29, 2026October 29, 2026same day
CVE-2026-41709+ Patch & DefenseOctober 28, 2026October 28, 2026same day
CVE-2026-46300+ Patch & DefenseOctober 28, 2026October 28, 2026same day
CVE-2026-111497+ Patch & DefenseOctober 27, 2026October 27, 2026same day
CVE-2026-48356+ Patch & DefenseOctober 27, 2026October 27, 2026same day
CVE-2026-110936? Vulnerability WatchOctober 20, 2026October 20, 2026same day
CVE-2026-96656~ AnalysisOctober 20, 2026October 20, 2026same day
CVE-2026-102764+ Patch & DefenseOctober 16, 2026October 16, 2026same day
CVE-2026-0322~ AnalysisOctober 14, 2026October 14, 2026same day
CVE-2026-104935+ Patch & DefenseOctober 13, 2026October 13, 2026same day
CVE-2026-88779+ Patch & DefenseOctober 4, 2026October 4, 2026same day
CVE-2026-104286+ Patch & DefenseOctober 1, 2026October 1, 2026same day
CVE-2026-76504+ Patch & DefenseSeptember 30, 2026September 30, 2026same day
~/track-record --methodology

What's counted: only CVE entries a named editor actually wrote, that are currently confirmed KEV or exploited-in-wild, and where we have both our own publish date and CISA's official KEV-listing date (kevDateAdded) to compare.

What's excluded: the roughly 1,600 CVE entries oursync process auto-backfilled directly from CISA's own catalog, to fill out the KEV tracker. Those entries' publish dates are mechanically set to CISA's own listing date — including them would inflate this number for free, so they're not counted.

What "lead time" does and doesn't mean: a large lead-time number sometimes means we happened to cover a CVE for general disclosure reasons long before CISA later confirmed active exploitation on it — not that we predicted the exploitation. Either way, the claim is narrow and literal: our reporting existed, and was accurate, before CISA's official confirmation. Dates are shown in full above so you can judge each one yourself.