CISA Adds One Known Exploited Vulnerability to Catalog

2026-08-05T19:24:00Z76b56aae2c6faeaaf0295aa121d2293eb5f344bfae66112fe76eea97cf275915
CVE-2025-68686CVE-2026-16232CVE-2026-16812CVE-2026-18556CVE-2026-18577CVE-2026-20316CVE-2026-34486CVE-2026-50522CVE-2026-63077CVE-2026-9198CISAKEVKnown Exploited VulnerabilitiesOT securityPLCsactive exploitationauthentication bypasscode injectioncommand injectioncritical infrastructuredeserializationhard-coded passwordinternet-exposed assetssensitive information exposurevulnerability managementwater and wastewater

What happened

CISA reports active exploitation of multiple vulnerabilities added to its Known Exploited Vulnerabilities (KEV) Catalog, including flaws in JetBrains TeamCity, IBM Langflow, N-able N-central, Apache Tomcat, Cisco Secure Firewall Management Center, Fortinet FortiOS, Arista VeloCloud Orchestrator, Check Point SmartConsole, and Microsoft SharePoint. CISA also warns that threat actors are targeting internet-exposed programmable logic controllers in the water and wastewater sector, causing operator lockouts, configuration changes, and operational disruption. Organizations should prioritize KEV remद

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
cisa_ncas_current_activity
Record identifier
76b56aae2c6faeaaf0295aa121d2293eb5f344bfae66112fe76eea97cf275915
Enrichment time
2026-08-05T19:24:00Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.