CISA Adds One Known Exploited Vulnerability to Catalog

CISA added CVE-2026-63077, a JetBrains TeamCity deserialization of untrusted data vulnerability, to its Known Exploited Vulnerabilities Catalog due to evidence of active exploitation. The advisory stresses BOD 26-04 requirements for federal agencies to prioritize rapid remediation of KEV-listed high-risk vulnerabilities on exposed assets and urges all organizations to adopt risk-based vulnerability management and submit suspected exploited CVEs for KEV consideration.