CISA Adds One Known Exploited Vulnerability to Catalog

CISA added a newly identified vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog due to evidence of active exploitation. The notice reiterates Binding Operational Directive (BOD) 26-04 requirements for federal agencies to prioritize rapid remediation of KEV-listed CVEs on publicly exposed assets that grant total control post-exploitation, and encourages all organizations to follow risk-based vulnerability management and submit potential KEV nominations with CVE IDs, exploitation evidence, and mitigation guidance.