CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation

CISA added three vulnerabilities to its Known Exploited Vulnerabilities catalog — a high-severity Google Chrome V8 out-of-bounds issue (CVE-2026-11645), a Cisco Catalyst SD-WAN Manager command execution flaw (CVE-2026-20245), and an Arista EOS tunnel decapsulation vulnerability (CVE-2026-7473) reported as exploited in the wild; Arista will not issue a patch and recommends ACL mitigations while federal agencies were ordered to remediate or mitigate by June 23, 2026.