CISA Adds One Known Exploited Vulnerability to Catalog
2026-03-18T23:24:25Z•5873936f71a52b5a62dc9dd127c7e0329570dfd00da1d661f345bb9dcf232131
BOD 22-01CISAKEVKnown Exploited VulnerabilitiesMFAMicrosoft IntuneRBACStrykeractive exploitationendpoint managementhardeningleast privilegevulnerability management
What happened
CISA announced multiple additions to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation and issued an alert urging hardening of endpoint management systems after a March 11, 2026 cyberattack affecting a U.S. organization. The KEV additions include vulnerabilities across SharePoint, Zimbra, Wing FTP, Google Skia/Chromium V8, n8n, Omnissa, SolarWinds Web Help Desk, and Ivanti EPM. CISA reiterated BOD 22-01 remediation requirements for Federal Civilian Executive Branch agencies and recommended all organizations prioritize timely remediation and apply Intune
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- 5873936f71a52b5a62dc9dd127c7e0329570dfd00da1d661f345bb9dcf232131
- Enrichment time
- 2026-03-18T23:24:25Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.