CISA Adds 3 Critical Vulnerabilities To Exploited List

CISA updated its KEV Catalog to add three actively exploited vulnerabilities—ImageMagick 'ImageTragick' (CVE-2016-3714) enabling remote code execution, a Linux kernel PIE-related stack buffer corruption (CVE-2017-1000253) leading to local privilege escalation, and a critical SonicWall SonicOS management/SSLVPN access flaw (CVE-2024-40766) that permits unauthenticated access—urging organizations to prioritize patching, restrict management access, enable MFA, and monitor for anomalous activity.