CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA reporting from August 3–11, 2026 identifies 11 vulnerabilities added to the Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation, including flaws affecting Cisco Secure Firewall, Microsoft Windows, Metabase, Progress LoadMaster, JetBrains TeamCity, IBM Langflow, N-able N-central, Apache Tomcat, and Cisco Secure Firewall Management Center. CISA urges rapid remediation, prioritizing publicly exposed assets, and recommends organizations assess potential compromise before patching. A separate alert warns that threat actors are targeting internet-exposed water