CISA Adds One Known Exploited Vulnerability to Catalog

CISA reported the addition of 15 vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog between August 5 and August 19, 2026, based on evidence of active exploitation. Affected products include MLflow, Microsoft IKE and SharePoint, VMware vCenter, Apple macOS, Ray Project, Cisco ASA/FTD, Microsoft Windows, Metabase, Progress LoadMaster, JetBrains TeamCity, IBM Langflow, N-able N-central, and Apache Tomcat. CISA urges rapid remediation, asset exposure assessment, and post-exploitation compromise checks, with mandatory prioritization for applicable U.S. federal civilian agencies.