CISA Adds Two Known Exploited Vulnerabilities to Catalog

This notice outlines CISA’s Binding Operational Directive (BOD) 26-04 requirements for prioritizing remediation of high‑risk vulnerabilities identified in the Known Exploited Vulnerabilities (KEV) Catalog, directs federal agencies to prioritize rapid patching of KEV-listed CVEs affecting publicly exposed assets and to check for compromise before applying patches, and encourages organizations to adopt risk-based vulnerability management and submit evidence-backed CVE nominations for inclusion in the KEV Catalog.