CISA’s latest addition to its Known Exploited Vulnerabilities Catalog is a sharp reminder that active exploitation still matters more than abstract severity scores. On April 16, 2026, the agency added CVE-2026-34197, an Apache ActiveMQ flaw described as an improper input validation...