CISA Updates KEV Catalog with 4 Critical Vulnerabilities Following Ongoing Exploits

CISA expanded its Known Exploited Vulnerabilities catalog with four critical CVEs (affecting eslint-config-prettier, Vite, Versa Concerto SD-WAN, and Zimbra) that are being actively exploited; federal agencies and critical infrastructure operators must remediate by February 12, 2026. The report highlights supply-chain and infrastructure attack vectors, provides product-specific mitigation steps (patching, dependency reviews, credential rotation, segmentation, WAF), and urges coordinated incident response and monitoring for signs of compromise.