CISA's KEV Catalog Sees 20% Increase in Vulnerabilities Amid Underreporting Concerns

In 2025, the number of known exploited vulnerabilities in CISA's KEV catalog increased by 20%, with 245 new vulnerabilities added. However, research from Miggo Security indicates that the catalog may only represent 12% of actual exploit risks in open source software, raising questions about its completeness and utility for organizations. The findings highlight the growing attack surface due to open source code dependencies.