Automated CISA KEV (Known Exploited Vulnerabilities) threat intelligence watcher and security telemetry pipeline.
# 🛡️ Cloud & Enterprise Threat Intel Watcher
[](https://github.com/GarciaVillenaLuis/threat-intel-watcher/actions/workflows/daily-threat-intel.yml)
[](https://www.cisa.gov/known-exploited-vulnerabilities-catalog)
[](LICENSE)
An automated, cloud-native **Git Scraping** telemetry pipeline developed by [Luis García Villena](https://www.linkedin.com/in/luis-garcia-villena/) (*Security Transformation Analyst at Accenture*).
This pipeline continuously monitors, ingests, normalizes, and version-controls the official **Known Exploited Vulnerabilities (KEV)** catalog published by the Cybersecurity and Infrastructure Security Agency (CISA).
---
## 📊 Live Feed Status
- **Total Exploited CVEs Tracked**: `1766`
- **Catalog Version**: `2026.10.30`
- **Last Automated Sync**: `2026-10-31 22:45:01 UTC`
- **Execution Engine**: 100% Cloud-Native GitHub Actions (Ubuntu ephemeral runners)
---
## 📋 Latest Ingested Vulnerabilities (Preview)
| CVE ID | Vendor / Project | Product | Vulnerability Name | Date Added |
| :--- | :--- | :--- | :--- | :---: |
| [CVE-2026-118527](https://nvd.nist.gov/vuln/detail/CVE-2026-118527) | Ivanti | Connect Secure | Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability | 2026-10-30 |
| [CVE-2026-111357](https://nvd.nist.gov/vuln/detail/CVE-2026-111357) | Ivanti | Connect Secure | Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability | 2026-10-30 |
| [CVE-2026-97229](https://nvd.nist.gov/vuln/detail/CVE-2026-97229) | GitLab | Community Edition and Enterprise Edition | GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability | 2026-10-29 |
| [CVE-2026-76418](https://nvd.nist.gov/vuln