U.S. CISA adds SolarWinds Web Help Desk, Notepad++, Microsoft Configuration Manager, and Apple devices flaws to its Known Exploited Vulnerabilities catalog

CISA added four vulnerabilities to its Known Exploited Vulnerabilities catalog — CVE-2024-43468 (Microsoft Configuration Manager SQL injection, CVSS 9.8), CVE-2025-15556 (Notepad++ updater integrity bypass, CVSS 7.7), CVE-2025-40536 (SolarWinds Web Help Desk security control bypass, CVSS 8.1), and CVE-2026-20700 (Apple dyld buffer overflow actively exploited zero-day, CVSS 7.8) — and mandated federal remediation deadlines while linking to vendor advisories and providing context on impact and exploitation.