CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA reports multiple actively exploited vulnerabilities added to the KEV Catalog in July 2026, affecting Fortinet FortiOS/FortiSandbox, Arista VeloCloud Orchestrator, Check Point SmartConsole, Microsoft SharePoint and AD FS, SonicWall SMA1000, WordPress, Langflow, DD-WRT, KNX, and Oracle E-Business Suite. CISA separately urges immediate SharePoint hardening after exploitation enabled unauthorized access, remote code execution, IIS machine-key theft, persistence, and malware deployment. Organizations should prioritize patching, restrict public exposure, investigate affected systems for prior3?