CISA Adds One Known Exploited Vulnerability to Catalog

Between Mar 20 and Apr 1, 2026, CISA added multiple vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog (per BOD 22-01) based on evidence of active exploitation. Affected products include Google Dawn, Citrix NetScaler, F5 BIG‑IP, Aqua Security Trivy, Langflow, Cisco Secure FMC/SCC, Apple multiple products, Craft CMS, and Laravel Livewire. CISA urges timely remediation under BOD 22‑01; these vulnerabilities include remote code execution, code injection, use‑after‑free, out‑of‑bounds read, and deserialization issues and represent a significant risk to enterprise networks.