Microsoft’s CVE-2026-85880 Was Exploited in 0 Days — Well Under Its 546-Day Median (September 2026)

Our automated tracking framework flagged that CISA added CVE-2026-85880 (Microsoft Windows) to the Known Exploited Vulnerabilities (KEV) catalog on September 10, 2026. A KEV listing is CISA’s official confirmation that the flaw is being exploited in the wild — U.S. federal agencies must patch it by a fixed deadline. Here is what our data shows. […]