CISA Adds One Known Exploited Vulnerability to Catalog
2026-04-16T23:24:16Z•f212d35f8cdf746e6ef3a9397d854644a7628bc71c9080d572c13fffec4a4730
AdobeApache ActiveMQBOD 22-01CISAFortinetGoogle DawnIvantiKEVKnown Exploited VulnerabilitiesMicrosoftTrueConfactive exploitationvulnerability management
What happened
Between April 2–16, 2026, CISA added multiple vulnerabilities to the Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. The additions cover a range of products including Apache ActiveMQ, multiple Microsoft products (Office, SharePoint, Exchange, Windows), Adobe Acrobat/Reader, Fortinet (FortiClient and Fortinet products), Ivanti Endpoint Manager Mobile (EPMM), TrueConf client, and Google Dawn. CISA cites Binding Operational Directive (BOD) 22-01 requirements for federal agencies and strongly urges all organizations to prioritize timely remediation of these
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- f212d35f8cdf746e6ef3a9397d854644a7628bc71c9080d572c13fffec4a4730
- Enrichment time
- 2026-04-16T23:24:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.