CISA Adds One Known Exploited Vulnerability to Catalog

CISA added multiple vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog between May 7–22, 2026. The additions include a range of actively exploited issues (SQL injection, authentication bypass, directory traversal, XSS, buffer overflow, elevation-of-privilege, DoS, and improper input validation) affecting products such as Drupal Core, Cisco Catalyst SD‑WAN Controller, Trend Micro Apex One, Microsoft Exchange/Defender, Langflow, BerriAI LiteLLM, Ivanti EPMM, and others. Federal Civilian Executive Branch agencies must remediate listed KEV items per BOD 22‑01; CISA urges all orgs