CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA advisories published August 4–18, 2026 report 14 vulnerabilities added to the Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. Affected products include Microsoft IKE and Windows, SharePoint, VMware vCenter, Apple macOS, Ray Project, Cisco ASA/FTD, Metabase, Progress LoadMaster, JetBrains TeamCity, IBM Langflow, N-able N-central, and Apache Tomcat. Organizations should urgently assess exposure, apply available mitigations or patches, prioritize publicly exposed systems, and investigate potential compromise before remediation.