CISA Adds Seven Known Exploited Vulnerabilities to Catalog

Seven newly cataloged vulnerabilities spanning SQL injection, command injection, server-side request forgery, and improper authentication are being actively exploited in the wild across products from vendors including SonicWall, JFrog, and Sangoma. The inclusion in CISA's Known Exploited Vulnerabilities (KEV) Catalog means these flaws are not theoretical — attackers are leveraging them right now against federal and enterprise targets. Organizations that delay patching publicly exposed assets face serious risk of breach, data theft, or lateral movement within their networks. CISA's Binding Operational Directive (BOD) 26-04 underscores that timely remediation of KEV-listed flaws is a compliance requirement for federal agencies, not merely a best practice.