CISA Adds Two Known Exploited Vulnerabilities to Catalog
ID: e62e9472-9e39-57ad-b04a-b27e612df7e9
STIX ID: report--e62e9472-9e39-57ad-b04a-b27e612df7e9
Feed Name: CISA Advisories
Threat Score
CISA added two CVEs—CVE-2026-41709 (Broadcom VMware ESX insufficient logging) and CVE-2026-46300 (Linux kernel missing variable initialization)—to its Known Exploited Vulnerabilities (KEV) Catalog citing evidence of active exploitation. The advisory urges federal agencies to follow Binding Operational Directive 26-04 to prioritize remediation of cataloged high-risk vulnerabilities and encourages organizations to nominate additional exploited vulnerabilities for inclusion.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.