CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA's addition of four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog — affecting Palo Alto Networks PAN-OS, Cisco Secure Email Gateway, and Ahsay AhsayCBS — signals that threat actors are actively weaponizing these flaws in the wild. The core problem is that organizations, particularly those running public-facing infrastructure, are failing to apply patches before adversaries can exploit known weaknesses. This matters because network security appliances and email gateways are high-value targets that, once compromised, can provide attackers with broad access to internal systems. CISA's Binding Operational Directive (BOD) 26-04 mandates federal agencies remediate these vulnerabilities promptly, but the risk extends equally to private sector organizations that depend on the same products.