CISA Adds One Known Exploited Vulnerability to Catalog
2026-08-05T19:24:00Z•76b56aae2c6faeaaf0295aa121d2293eb5f344bfae66112fe76eea97cf275915
CVE-2025-68686CVE-2026-16232CVE-2026-16812CVE-2026-18556CVE-2026-18577CVE-2026-20316CVE-2026-34486CVE-2026-50522CVE-2026-63077CVE-2026-9198CISAKEVKnown Exploited VulnerabilitiesOT securityPLCsactive exploitationauthentication bypasscode injectioncommand injectioncritical infrastructuredeserializationhard-coded passwordinternet-exposed assetssensitive information exposurevulnerability managementwater and wastewater
What happened
CISA reports active exploitation of multiple vulnerabilities added to its Known Exploited Vulnerabilities (KEV) Catalog, including flaws in JetBrains TeamCity, IBM Langflow, N-able N-central, Apache Tomcat, Cisco Secure Firewall Management Center, Fortinet FortiOS, Arista VeloCloud Orchestrator, Check Point SmartConsole, and Microsoft SharePoint. CISA also warns that threat actors are targeting internet-exposed programmable logic controllers in the water and wastewater sector, causing operator lockouts, configuration changes, and operational disruption. Organizations should prioritize KEV remद
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- 76b56aae2c6faeaaf0295aa121d2293eb5f344bfae66112fe76eea97cf275915
- Enrichment time
- 2026-08-05T19:24:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.