CISA Adds Two Known Exploited Vulnerabilities to Catalog
2026-03-04T22:01:14Z•b0de11efd687c55d5838427129f0bff1e4f69f6caeeca6ca1a11d8fc817520a5
What happened
CISA announced multiple additions to its Known Exploited Vulnerabilities (KEV) Catalog and issued guidance on ongoing active exploitation—notably of Cisco SD‑WAN systems. CISA (with NSA and international partners) urges immediate remediation and threat-hunting actions (inventory, artifact collection, patching, compromise assessment) and reminds Federal Civilian Executive Branch agencies of Binding Operational Directive (BOD) 22‑01 (and ED 26‑03 for Cisco SD‑WAN). The bulletin lists a range of CVEs across vendors (Cisco, Qualcomm, Broadcom/VMware Aria, Soliton/FileZen, RoundCube, GitLab, Dell,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- b0de11efd687c55d5838427129f0bff1e4f69f6caeeca6ca1a11d8fc817520a5
- Enrichment time
- 2026-03-04T22:01:14Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.