CISA Adds One Known Exploited Vulnerability to Catalog
2026-08-24T21:24:04Z•d9711a212ec61b280aa0b1f6f25075f504e58caab70cda4dcfa7a12a7b142eeb
CVE-2025-62593CVE-2026-20349CVE-2026-21962CVE-2026-33824CVE-2026-55040CVE-2026-59310CVE-2026-64849CVE-2026-65400CVE-2026-68820CVE-2026-72529CVE-2026-72530CVE-2026-72898CVE-2026-73570Apple macOSCISACisco ASAKEVKnown Exploited VulnerabilitiesMLflowMetabaseMicrosoft SharePointOracle WebLogicSQL injectionSSRFTrueConfVMware vCenterZimbraactive exploitationcode injectionpath traversalrisk-based vulnerability managementvulnerability remediation
What happened
CISA alerts from August 17–24, 2026 report 14 vulnerabilities added to the Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. Affected products include Oracle HTTP/WebLogic Server, Zimbra Collaboration Suite, TrueConf Server, MLflow, Microsoft IKE and SharePoint, VMware vCenter, Apple macOS, Ray, Cisco ASA/FTD, Microsoft Windows, and Metabase. Organizations should prioritize rapid remediation, especially for publicly exposed systems, and assess whether compromise occurred before patching.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- d9711a212ec61b280aa0b1f6f25075f504e58caab70cda4dcfa7a12a7b142eeb
- Enrichment time
- 2026-08-24T21:24:04Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.