Hikvision and Rockwell Automation CVSS 9.8 Flaws Added to CISA KEV Catalog

CISA has added two critical-severity vulnerabilities—CVE-2017-7921 (Hikvision improper authentication) and CVE-2021-22681 (Rockwell Automation insufficiently protected credentials)—to its Known Exploited Vulnerabilities catalog, citing active exploitation evidence for the Hikvision issue; both are CVSS 9.8 and FCEB agencies are required to remediate by March 26, 2026 under BOD 22-01.