CISA Adds One Known Exploited Vulnerability to Catalog

CISA added CVE-2026-73570 (Zimbra Collaboration Suite OS Command Injection) to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation, highlighting the significant risk posed by this vulnerability. The notice references BOD 26-04, urging federal agencies to prioritize rapid remediation of KEV-listed high-risk vulnerabilities on publicly exposed assets and encourages all organizations to adopt risk-based vulnerability management; it also invites submissions of other exploited vulnerabilities for KEV consideration.