CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA added four vulnerabilities to its Known Exploited Vulnerabilities Catalog—CVE-2026-75650 (Adobe Commerce/Magento template engine), CVE-2026-81963 (Microsoft Windows link following), CVE-2026-85880 (Microsoft Windows heap-based buffer overflow), and CVE-2026-86218 (N-able N-central static code injection)—citing evidence of active exploitation and urging prioritized remediation under Binding Operational Directive 26-04; organizations are also encouraged to submit other exploited vulnerabilities for KEV consideration.