CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA reports the addition of multiple vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. The affected products include Microsoft Windows, Ivanti Connect Secure, Citrix NetScaler, Zammad, Fortinet FortiMail, Cisco Catalyst SD-WAN Manager, and Apple products. Organizations should prioritize remediation, assess internet-facing systems, and investigate potential compromise, consistent with CISA risk-based vulnerability management guidance and BOD 26-04.