CISA Adds Four Known Exploited Vulnerabilities to Catalog
Summary
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, citing evidence of active exploitation. These vulnerabilities affect Check Point products, Arista VeloCloud Orchestrator, and F5 BIG-IP APM. The addition reinforces CISA's Binding Operational Directive (BOD) 26-04, which mandates federal agencies to prioritize the remediation of high-risk vulnerabilities listed in the KEV Catalog.
IFF Assessment
The inclusion of actively exploited vulnerabilities in CISA's KEV catalog represents a direct threat to organizations, indicating active and successful attacks in the wild.
Severity
CISA KEV: Listed as actively exploited. Federal patch due: September 25, 2026. Known ransomware use: Unknown.
Defender Context
Organizations should closely monitor CISA's KEV catalog for newly added vulnerabilities, as these represent actively exploited threats that require immediate attention. Prioritizing patching for these identified vulnerabilities, especially on publicly exposed assets, is crucial for mitigating risks and preventing potential compromises.