CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA added three actively exploited vulnerabilities (a Cisco ASA/FTD heap issue, a Windows WinSock use-after-free, and a Metabase SQL injection) to its Known Exploited Vulnerabilities Catalog and urges rapid remediation; BOD 26-04 requires federal agencies to prioritize patching and checking for compromise before applying fixes, and CISA encourages all organizations to follow risk-based vulnerability management.