CISA Adds One Known Exploited Vulnerability to Catalog
2026-06-02T13:24:09Z•358a62f217593988880ededd208f1c36469de81cde560f4304ea796e363e2060
BOD 22-01CI/CDCISADaemon ToolsDrupal CoreGitHubKEV CatalogLangflowLiteSpeed cPanelMegalodonNx ConsoleOracle WebLogicPalo Alto PAN‑OSTanStackTrend Micro Apex OneVS Codesupply chainvulnerability management
What happened
CISA announced multiple additions to its Known Exploited Vulnerabilities (KEV) Catalog in late May–June 2026 and warned of active supply‑chain intrusion campaigns. New KEV entries include vulnerabilities affecting Oracle WebLogic, Palo Alto PAN‑OS, Daemon Tools Lite, TanStack, Nx Console (malicious VS Code extension), LiteSpeed cPanel plugin, Drupal Core, Langflow, and Trend Micro Apex One. CISA also described supply‑chain compromises: a malicious Nx Console VS Code extension (CVE‑2026‑48027) that was distributed via automatic updates and led to a GitHub employee compromise and repository exfil
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- 358a62f217593988880ededd208f1c36469de81cde560f4304ea796e363e2060
- Enrichment time
- 2026-06-02T13:24:09Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.