CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA reports the addition of 13 vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog during late October and early November 2026, based on evidence of active exploitation. Affected products include GPUStack, SignalWire FreeSWITCH, OpenBSD OpenSSH, IBM Aspera Faspex, SonicWall SonicOS, Apple products, WordPress, Ivanti Connect Secure, GitLab, Cisco Secure Firewall/FTD, VMware ESXi, and the Linux kernel. Organizations are urged to prioritize remediation, assess potentially compromised systems, and follow risk-based vulnerability management; federal agencies must comply with BOD s