CISA adds four critical vulnerabilities to KEV catalog for active exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, confirming their active exploitation in the wild. Among them are an authentication flaw in Apple macOS (CVE-2026-65400) and a weak authentication flaw in Microsoft SharePoint (CVE-2026-55040). Also included are a path traversal vulnerability in Broadcom VMware vCenter (CVE-2026-59310) and a remote code execution flaw in the Windows Internet Key Exchange (IKE) service (CVE-2026-33824). CISA has urged organizations to patch these systems immediately, as attackers are using them to move laterally and compromise enterprise networks.

Source: The Hacker News