CISA Adds Five Enterprise Software Flaws to Known Exploited Vulnerabilities Catalog

CISA added five enterprise software vulnerabilities to its Known Exploited Vulnerabilities catalog — high-severity flaws in Versa Concerto (improper authentication), VMware vCenter (out-of-bounds/heap overflow that may allow RCE), Zimbra Webmail (LFI), a supply-chain compromise in eslint-config-prettier that can execute malware on Windows, and an improper access control issue in Vite — highlighting significant attack vectors though CISA did not attribute exploitation to specific actors.