CISA Adds Two Known Exploited Vulnerabilities to Catalog
2026-03-13T17:24:16Z•9d5db9f59fcd38fc0731c3b033f2ec6e2fcb86ada6f1ab9a26c6d52d35cb6d9c
BOD 22-01CISAChromium V8Cisco SD‑WANED 26-03Google SkiaIvantiKEVSolarWindsactive exploitationauthentication bypassn8npatchingpath traversalvulnerability management
What happened
CISA added multiple vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog after evidence of active exploitation. Notable additions include Google Skia (CVE-2026-3909) and Chromium V8 (CVE-2026-3910), an n8n code‑execution-related flaw (CVE-2025-68613), and several product-specific issues across Cisco, Qualcomm, Broadcom/VMware Aria, Ivanti, SolarWinds, Apple, Hikvision, Rockwell, and Omnissa. CISA and partner agencies issued a focused alert on active, global exploitation of Cisco SD‑WAN systems—highlighting an authentication bypass (CVE-2026-20127) used for initial access and a
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- 9d5db9f59fcd38fc0731c3b033f2ec6e2fcb86ada6f1ab9a26c6d52d35cb6d9c
- Enrichment time
- 2026-03-13T17:24:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.