CISA Adds Six Known Exploited Vulnerabilities to Catalog
CISA adds six exploited vulnerabilities to its Known Exploited Vulnerabilities Catalog.
CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog due to evidence of active exploitation. These vulnerabilities are frequently used by malicious actors and pose significant risks. Binding Operational Directive (BOD) 26-04 requires Federal Civilian Executive Branch (FCEB) agencies to prioritize rapid remediation of high-risk vulnerabilities listed in the KEV Catalog on publicly exposed assets.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Cisco?
Get an email when a new story names Cisco, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
What helps against this
How we list vendors- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Cyber asset inventory
You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-20320
- cve — CVE-2026-111560
- cve — CVE-2026-111793
- cve — CVE-2026-116606
- cve — CVE-2026-124194
- cve — CVE-2026-125350