CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA alerts from September 16–22, 2026 report the addition of 12 vulnerabilities to the Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. Affected products include Check Point, Arista VeloCloud Orchestrator, F5 BIG-IP APM, Zyxel GS1900 switches, Linux kernel, Cisco ISE and Secure Email Gateway, Acronis Backup, and Google Pixel. Organizations should prioritize remediation, investigate for compromise before patching, and apply risk-based vulnerability management; FCEB agencies must follow BOD 26-04 requirements.