CISA Adds New Known Exploited Vulnerabilities To Catalog

**Executive summary:** This report details five vulnerabilities added to CISA's Known Exploited Vulnerabilities Catalog (CVE-2023-20118, CVE-2022-43939, CVE-2022-43769, CVE-2018-8639, CVE-2024-4885), notes active exploitation of several flaws (including a CVSS 9.8 path traversal → RCE), identifies affected products (Cisco Small Business RV routers, Hitachi Pentaho BA Server, Microsoft Win32k, Progress WhatsUp Gold), and recommends prompt patching, upgrades, network segmentation, and enhanced monitoring to mitigate risk.