71% of exploited vulnerabilities are not in the CISA KEV catalog.

February 5, 2026

71% of exploited vulnerabilities are not in the CISA KEV catalog. — This cybersecurity statistic was published by Forescout Technologies Inc in February 2026. It covers topics including Vulnerabilities, KEV. The original data appears in 2025 Threat Roundup. For the full methodology and detailed findings, refer to the original report.

Source

View Original Report

Published on 1/29/2026

Share or Copy this stat

Frequently Asked Questions

What does this statistic say?

71% of exploited vulnerabilities are not in the CISA KEV catalog. This data was published by Forescout Technologies Inc and covers Vulnerabilities, KEV.

Where does this data come from?

This statistic comes from 2025 Threat Roundup, published by Forescout Technologies Inc on February 5, 2026. You can view the original report at https://www.forescout.com/resources/2025-threat-roundup/.

What cybersecurity topics does this cover?

This statistic relates to Vulnerabilities, KEV. Browse more statistics on Vulnerabilities or from Forescout Technologies Inc.

CYBERSTATS

71% of exploited vulnerabilities are not in the CISA KEV catalog.

Source

Share or Copy this stat

Frequently Asked Questions

Want More Statistics Like This?

Related Statistics

99% of API vulnerabilities are remotely exploitable.

In 2025, 17% of 67,058 published vulnerabilities (11,053 vulnerabilities) were API-related.

25% of ICS-CERT and NVD vulnerabilities have incorrect CVSS scores.

11% of detected vulnerabilities have a known exploit.

The most widely detected vulnerability is CVE-2013-2566, which dates to 2013.

In 2025, 14% of published AI vulnerabilities were MCP-related (315 MCP-related vulnerabilities).

Browse by Topic

Stay Ahead of Cyber Threats