Active Advisories
Vulnerabilities we’re still investigating or remediating.
What Each Status Means
We’re assessing whether KnowBe4 products are exposed. No determination yet.
One or more products are affected. We list them and track remediation here.
Temporary protections, such as configuration changes or blocking rules, reduce risk while we prepare a permanent fix.
A permanent fix is rolling out to affected products. We track progress for each product.
We confirmed our products don’t use the vulnerable component or aren’t exploitable.
All affected products have been remediated. No further action is needed.
Past Advisories
Closed advisories stay here for reference.
| Advisory | Severity | KnowBe4 Status | Products Affected | Closed |
|---|
Questions About an Advisory?
Contact your customer success manager or open a ticket with KnowBe4 Support. Include the CVE ID so we can route your question to Product Security.
Support portalReport a Vulnerability
Found a security issue in a KnowBe4 product? Report it through our vulnerability disclosure program and our Product Security team will respond.
Vulnerability disclosure program