CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA reported the addition of 13 vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog between August 7 and August 20, 2026, citing evidence of active exploitation. Affected products include TrueConf Server, MLflow, Microsoft Windows and SharePoint, VMware vCenter, Apple macOS, Ray, Cisco ASA/FTD, Metabase, Progress LoadMaster, and JetBrains TeamCity. Organizations should prioritize emergency remediation, assess internet-exposed assets, and investigate potential compromise before patching, consistent with risk-based vulnerability management and BOD 26-04 guidance.