CISA Adds One Known Exploited Vulnerability to Catalog

CISA alerts report active exploitation of multiple vulnerabilities added to the Known Exploited Vulnerabilities (KEV) Catalog, including command injection, deserialization, code injection, authentication bypass, hard-coded credentials, sensitive information exposure, and missing encryption flaws affecting Progress LoadMaster, JetBrains TeamCity, IBM Langflow, N-able N-central, Apache Tomcat, Cisco Secure Firewall Management Center, Fortinet FortiOS, and Arista VeloCloud Orchestrator. CISA also warns that threat actors are targeting internet-exposed programmable logic controllers in the Water/W