Were we right, and were we early?
Any tracker can mirror CISA's KEV catalog after the fact. This page checks whether our own reporting existed before CISA's official confirmation — computed directly from our publish dates against CISA's listing dates, not asserted. The query that generates this page is public; see the methodology note below.
Fastest calls on record
| CVE | Editor | We published | CISA listed KEV | Lead time |
|---|---|---|---|---|
| CVE-2025-25249 | + Patch & Defense | September 9, 2026 | September 9, 2026 | same day |
| CVE-2026-20079 | + Patch & Defense | September 9, 2026 | September 9, 2026 | same day |
| CVE-2026-75650 | ? Vulnerability Watch | September 8, 2026 | September 8, 2026 | same day |
| CVE-2026-81963 | ? Vulnerability Watch | September 8, 2026 | September 8, 2026 | same day |
| CVE-2026-85880 | ? Vulnerability Watch | September 8, 2026 | September 8, 2026 | same day |
| CVE-2026-85046 | + Patch & Defense | September 4, 2026 | September 4, 2026 | same day |
| CVE-2026-73570 | ! Breaking | August 21, 2026 | August 21, 2026 | same day |
| CVE-2025-62593 | + Patch & Defense | August 17, 2026 | August 17, 2026 | same day |
| CVE-2026-20349 | + Patch & Defense | August 11, 2026 | August 11, 2026 | same day |
| CVE-2026-68820 | + Patch & Defense | August 11, 2026 | August 11, 2026 | same day |
| CVE-2026-20316 | + Patch & Defense | July 29, 2026 | July 29, 2026 | same day |
| CVE-2026-16812 | + Patch & Defense | July 27, 2026 | July 27, 2026 | same day |
| CVE-2026-16232 | + Patch & Defense | July 22, 2026 | July 22, 2026 | same day |
| CVE-2026-25089 | + Patch & Defense | July 16, 2026 | July 16, 2026 | same day |
| CVE-2026-46817 | + Patch & Defense | July 15, 2026 | July 15, 2026 | same day |
What's counted: only CVE entries a named editor actually wrote, that are currently confirmed KEV or exploited-in-wild, and where we have both our own publish date and CISA's official KEV-listing date (kevDateAdded) to compare.
What's excluded: the roughly 1,600 CVE entries oursync process auto-backfilled directly from CISA's own catalog, to fill out the KEV tracker. Those entries' publish dates are mechanically set to CISA's own listing date — including them would inflate this number for free, so they're not counted.
What "lead time" does and doesn't mean: a large lead-time number sometimes means we happened to cover a CVE for general disclosure reasons long before CISA later confirmed active exploitation on it — not that we predicted the exploitation. Either way, the claim is narrow and literal: our reporting existed, and was accurate, before CISA's official confirmation. Dates are shown in full above so you can judge each one yourself.