CISA adds three vulnerabilities to its Known Exploited Vulnerabilities Catalog

By Atlas Watchline Staff · Regulatory · August 27, 2026

CISA said it added three vulnerabilities to its Known Exploited Vulnerabilities Catalog after finding evidence of active exploitation.

CISA said on Aug. 27, 2026, that it added three vulnerabilities to its Known Exploited Vulnerabilities Catalog after finding evidence of active exploitation. The agency identified the flaws as CVE-2023-49105, an ownCloud improper authentication vulnerability; CVE-2026-53362, a Linux kernel unspecified vulnerability; and CVE-2026-66384, a JFrog Artifactory pathname limitation vulnerability.

CISA said these flaws are a frequent attack vector for malicious cyber actors and can pose significant risks to the federal enterprise. The catalog is used to help organizations focus on software issues that have already been seen in real-world attacks.

CISA linked the notice to Binding Operational Directive 26-04, titled Prioritizing Security Updates Based on Risk. The directive sets vulnerability management requirements for Federal Civilian Executive Branch agencies. CISA said it requires those agencies to move quickly on high-risk vulnerabilities listed in the KEV Catalog when they affect publicly exposed assets that could give an attacker full control after exploitation.

The agency also said the directive sets expectations for checking whether threat actors compromised a system before a patch was applied. CISA said that step helps agencies determine whether they need to do more than install a fix.

CISA said BOD 26-04 applies only to Federal Civilian Executive Branch agencies, but it encourages all organizations to use risk-based vulnerability management and prioritize KEV Catalog items. The agency said it will keep adding vulnerabilities that meet its criteria and accepts submissions through its KEV Nomination Form.

According to CISA, a potential catalog addition must have a CVE ID, evidence of exploitation and clear mitigation guidance.

Sources

• CISA Cybersecurity Advisories

Editorial note: This article was prepared with AI assistance and includes source attribution for reader review.

This is the AMP version of the article. Read the full article on Atlas Watchline.