CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA added multiple vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog in early June 2026, based on evidence of active exploitation. Newly listed issues include command injection, authentication bypass, out-of-bounds read/write, improper encoding/escaping, deserialization of untrusted data, uncontrolled resource consumption, and integer overflow flaws affecting products from Arista, Google/Chromium V8, Cisco, BerriAI, Check Point, SolarWinds, Mirasvit, Linux kernel, Android, Oracle WebLogic, and Palo Alto Networks. CISA reiterates BOD 22-01 remediation requirements for FCEB/f