CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA's addition of CVE-2025-61624 and CVE-2026-102764 to the Known Exploited Vulnerabilities Catalog confirms that threat actors are actively exploiting unpatched flaws in Fortinet products and BeyondTrust Remote Support — two widely deployed enterprise tools. The root cause is a failure to apply vendor patches promptly, leaving publicly exposed assets as easy targets for malicious actors. BeyondTrust and Fortinet products are high-value targets because they often hold privileged access to internal networks, meaning a successful exploit can serve as a launchpad for lateral movement or data exfiltration. Federal agencies are legally obligated under BOD 26-04 to remediate these vulnerabilities, but the broader private sector should treat the KEV Catalog as an urgent, actionable threat intelligence feed rather than a government-only concern.