CISA Adds One Known Exploited Vulnerability to Catalog

CISA’s August 2026 alerts report the addition of 13 vulnerabilities to the Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. Affected products include Zimbra Collaboration Suite, TrueConf Server, MLflow, Microsoft IKE and SharePoint, VMware vCenter, Apple macOS, Ray, Cisco ASA/FTD, Windows, Metabase, and Progress LoadMaster. Organizations should prioritize rapid remediation, assess publicly exposed assets for compromise, and follow risk-based vulnerability-management practices; FCEB agencies are subject to BOD 26-04 requirements.