CISA Adds Critical Flaws To Known Exploited Vulnerabilities Catalog

CISA has added four actively exploited vulnerabilities to its Known Exploited Vulnerabilities Catalog — CVE-2024-45195 (Apache OFBiz forced browsing), CVE-2024-29059 (Microsoft .NET information disclosure, CVSS 7.5), CVE-2018-9276 (Paessler PRTG command injection), and CVE-2018-19410 (Paessler PRTG local file inclusion) — affecting widely used ERP, Windows/.NET, and network monitoring products; organizations are urged to apply patches or upgrades immediately to prevent privilege escalation, data exposure, and remote command execution.