Cybersecurity & Privacy — 2026-03-18
CISA Issues CVIE: 136 CVEs Targeted by Iranian Actors, 3,100+ Critical Infrastructure Entities Exposed
CISA published a Cyber Vulnerability Insights Estimate identifying 136 CVEs that Iranian state-sponsored or linked threat actors have targeted or exploited, with over 3,100 US critical infrastructure entities confirming exposure. The advisory provides specific TTPs and mitigation guidance, prioritizing network edge devices and industrial control systems. The release coincides with documented Iranian attacks on medical device companies, nuclear research facilities, and GCC government networks.
Analysis
The CVIE's identification of 136 CVEs actively targeted by Iranian actors represents CISA's most comprehensive Iran-specific advisory to date. The 3,100+ exposed critical infrastructure entities figure is the first quantified scope of US domestic exposure to the cyber dimension of the Iran war.
The CVIE's identification of 136 CVEs actively targeted by Iranian actors represents CISA's most comprehensive Iran-specific advisory to date. The 3,100+ exposed critical infrastructure entities figure is the first quantified scope of US domestic exposure to the cyber dimension of the Iran war.