CISA Adds One Known Exploited Vulnerability to Catalog
2026-03-27T21:24:08Z•3abc0ae37fb4da37da682c567f6f74dd32edb0b42189aaaddf34119e641c8f92
AppleAqua Security TrivyBOD 22-01CISACisco FMCCraft CMSF5 BIG-IPKEVKnown Exploited VulnerabilitiesLangflowLaravel LivewireMicrosoft SharePointRCESynacor ZimbraXSSbuffer overflowcode injectiondeserializationremediationvulnerability management
What happened
Between 18–27 March 2026, CISA added multiple vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. Newly listed CVEs affect a range of vendors and products, including F5 BIG-IP (remote code execution), Aqua Security Trivy (embedded malicious code), Langflow (code injection), multiple Apple products (buffer overflows and improper locking), Craft CMS (code injection), Laravel Livewire (code injection), Cisco Secure Firewall Management Center / Security Cloud Control (deserialization of untrusted data), Microsoft SharePoint (deserialiation
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- 3abc0ae37fb4da37da682c567f6f74dd32edb0b42189aaaddf34119e641c8f92
- Enrichment time
- 2026-03-27T21:24:08Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.