CISA’s latest move is a reminder that the Known Exploited Vulnerabilities (KEV) Catalog remains one of the most operationally important signals in federal cybersecurity. On April 20, 2026, the agency added eight more CVEs tied to active exploitation, spanning print management, endpoint...
CISA’s latest update to the Known Exploited Vulnerabilities (KEV) Catalog adds four CVEs—spanning an aging ActiveX control, a decade-old Zimbra SSRF, a 2024 anti‑ransomware file‑upload flaw, and a 2026 Chromium use‑after‑free—underscoring that active exploitation can touch every layer of modern...