---
title: "Tag: CISA KEV"
description: "3 blog entries tagged CISA KEV, newest first, each with published and updated dates."
url: https://policycortex.com/blog/tags/cisa-kev
sealed: 2026-10-21
amended: 2026-10-23
register: blog/tags/cisa-kev
records: 3
digest: sha3:6ef126cf62aa81f5b471f91ee1b81747432c63c96a78d18b62e8b976c63a0e29
---

# Blog entries tagged CISA KEV

Resources / Blog / Tag: CISA KEV

Every blog entry tagged CISA KEV, newest first. Tags group the blog by subject so a reader working one requirement can follow it across entries as the rules change. Each entry shows when it was published and last updated; every entry is listed on the blog index.

3 entries · Last published 2026-10-23

## Entries, newest first

| Published | Entry | Reading |
|---|---|---|
| 2026-10-23 | [One Shared Atlassian Component Let Attackers Read Server Files With No Login](https://policycortex.com/blog/atlassian-data-center-file-read-kev): CVE-2026-21589 gives unauthenticated arbitrary file access in eight Atlassian Data Center products through one shared component. | 6 min |
| 2026-10-22 | [Two Exploited Flaws, One Short Clock: Windows and Ivanti on the KEV List](https://policycortex.com/blog/windows-ivanti-kev-zero-days-governance): CISA added a Windows Shell command injection flaw and an Ivanti Connect Secure login bypass to the KEV list on October 13, 2026. | 5 min |
| 2026-10-21 | [Plex2Shell: Four Small Bugs Chained Into One Takeover](https://policycortex.com/blog/plex2shell-chained-exploit-governance-lesson): CISA added four Plex Media Server flaws to its Known Exploited Vulnerabilities catalog on October 20, 2026. | 5 min |

## Related records

Guides and articles describe the work. The evidence that work produces is described in three proof pages and one architecture page.

- **proof.state**: [Proof of State](https://policycortex.com/proof/state). What the environment was, as of a date someone else picks: point-in-time records, content hashed and chained.
- **proof.change**: [Proof of Change](https://policycortex.com/proof/change). Who or what altered the environment, under what authority, with before and after state hashes.
- **proof.agency**: [Proof of Agency](https://policycortex.com/proof/agency). What a machine was permitted to do before it acted, what it did, and what would have stopped it.
- **architecture**: [Architecture](https://policycortex.com/architecture). How the chain is built and where it lives: inside your tenant, with no egress of evidence.

Read the entries. Then verify the record they describe. [Request Access](https://app.policycortex.com/auth?mode=request-access) · [Book a call](https://policycortex.com/book)

## Register colophon

| Seq | Label | SHA3-256 | Prev |
|---|---|---|---|
| REC 0000 | HEAD | 7896d63d3761 | 1e5ee71117a6 |
| REC 0001 | ENTRIES | e6149aa4ebcd | 7896d63d3761 |
| REC 0002 | RELATED RECORDS | 6ef126cf62aa | e6149aa4ebcd |

Head sha3:6ef126cf62aa81f5b471f91ee1b81747432c63c96a78d18b62e8b976c63a0e29. Each digest is SHA3-256 over the previous digest, the register key, the record label, and the record copy; a second party can recompute it from this document.