CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA announced the addition of two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation, reminded federal agencies of Binding Operational Directive (BOD) 26-04 requirements to prioritize remediation of KEV-listed CVEs on publicly exposed assets, and encouraged organizations to adopt risk-based vulnerability management and submit potential KEV nominations.