CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA added multiple vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. Affected products and vendors include Langflow, Trend Micro Apex One (On‑Premise), Microsoft (Windows, Internet Explorer, Defender, Exchange), Adobe Acrobat/Reader, Cisco Catalyst SD‑WAN, BerriAI LiteLLM, Ivanti EPMM, and Palo Alto PAN‑OS. CISA reiterates that BOD 22‑01 requires Federal Civilian Executive Branch agencies to remediate KEV items by the due date and urges all organizations to prioritize timely remediation and mitigations to reduce exposure to active攻击