CISA Warns of Active Exploitation in Cisco, PaperCut, and Zimbra

CISA expanded its Known Exploited Vulnerabilities (KEV) Catalog with eight high-impact CVEs affecting products such as PaperCut NG/MF, Quest KACE SMA, Kentico Xperience, JetBrains TeamCity, Cisco SD-WAN Manager, and Zimbra; the flaws include authentication bypasses, arbitrary file upload leading to RCE, path traversal, privilege escalation, and XSS, and CISA reports confirmed active exploitation and recommends immediate patching.