CISA Adds Three Known Exploited Vulnerabilities to Catalog
2026-05-27T19:24:12Z•c52c10ce9c8d113dafd557b67ba73c3dc611a17ce5b76dd1fe90c3f11b7857f1
BOD-22-01CiscoDaemonToolsDrupalLangflowLiteSpeedMicrosoftNx-ConsoleTanStackTrend-Microactive-exploitationcisacvekev-catalogknown-exploited-vulnerabilitiesremediationvulnerability-management
What happened
Between 15–27 May 2026, CISA added multiple vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. The additions include a mix of recent 2026 CVEs (e.g., CVE-2026-8398, CVE-2026-45321, CVE-2026-48027, CVE-2026-48172, CVE-2026-9082, CVE-2026-34926, CVE-2026-41091, CVE-2026-45498, CVE-2026-42897, CVE-2026-20182) as well as older widely exploited CVEs (e.g., CVE-2008-4250, CVE-2009-1537, CVE-2009-3459, CVE-2010-0249, CVE-2010-0806). CISA highlights that these vulnerabilities are frequent attack vectors, reminds Federal Civilian Executive Br
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- c52c10ce9c8d113dafd557b67ba73c3dc611a17ce5b76dd1fe90c3f11b7857f1
- Enrichment time
- 2026-05-27T19:24:12Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.