CISA Adds One Known Exploited Vulnerability to Catalog

CISA announced multiple additions to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. The feed lists 14 CVEs spanning diverse vendors and vulnerability types (authentication bypass, command injection, SSRF, deserialization, memory corruption, use‑after‑free, etc.). CISA and partners also released targeted guidance and an Emergency Directive for ongoing global exploitation of Cisco SD‑WAN systems (notably CVE-2026-20127 and CVE-2022-20775), urging immediate inventory, patching, artifact collection, threat hunting, and remediation per BOD 22‑01. Federal