CISA Adds One Known Exploited Vulnerability to Catalog

CISA announced multiple additions to its Known Exploited Vulnerabilities (KEV) Catalog and issued guidance related to active exploitation and Fortinet credential exposure (FortiBleed). New KEV entries include a range of vulnerabilities (path traversal, deserialization, authentication bypass, SSRF, code injection, improper access control, unrestricted upload, improper input validation, authorization bypass, and improper input validation) across vendors such as Adobe ColdFusion, JoomShaper, Joomlack, Langflow, Microsoft SharePoint Server, SimpleHelp, PTC Windchill/FlexPLM, Cisco Unified CM, Lan0