CISA confirms active exploitation of four enterprise software bugs

**Executive summary:** CISA confirmed active exploitation of four distinct vulnerabilities — a critical authentication bypass in Versa Concerto, a local file inclusion in Zimbra Webmail Classic, an improper access control issue in Vite dev instances, and a supply‑chain compromise of eslint-config-prettier that distributed a Windows token‑stealing payload — and added them to its Known Exploited Vulnerabilities catalog, requiring federal agencies to patch or mitigate by 2026‑02‑12.