CISA Adds One Known Exploited Vulnerability to Catalog

CISA added multiple vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog in May 2026 based on evidence of active exploitation. Affected products and issue types include Drupal Core (SQL injection), Langflow (origin validation), Trend Micro Apex One (directory traversal), multiple Microsoft and Adobe/IE vulnerabilities (buffer overflows, use‑after‑free, elevation of privilege, denial of service, XSS), Cisco Catalyst SD‑WAN (authentication bypass), BerriAI/LiteLLM (SQL injection), Ivanti EPMM (improper input validation), and several historical Windows/DirectX/Acrobat/Reader CVEs.