As cited
Copy frozen at (site build).
vulnerabilities
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA added CVE-2026-48356 (Adobe Commerce and Magento file upload vulnerability) and CVE-2026-111497 (Google Brotli return value vulnerability) to its Known Exploited Vulnerabilities Catalog based on active exploitation evidence. These additions reinforce Binding Operational Directive 26-04, which requires federal agencies to prioritize patching high-risk vulnerabilities on exposed assets and validate whether systems were compromised before remediation.
Why it matters: Federal agencies must urgently patch these two CVEs on internet-facing systems under BOD 26-04 compliance; all organizations should treat KEV Catalog entries as high-priority remediation targets since exploits are actively in use.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA added CVE-2026-48356 (Adobe Commerce and Magento file upload vulnerability) and CVE-2026-111497 (Google Brotli return value vulnerability) to its Known Exploited Vulnerabilities Catalog based on active exploitation evidence. These additions reinforce Binding Operational Directive 26-04, which requires federal agencies to prioritize patching high-risk vulnerabilities on exposed assets and validate whether systems were compromised before remediation.
Why it matters: Federal agencies must urgently patch these two CVEs on internet-facing systems under BOD 26-04 compliance; all organizations should treat KEV Catalog entries as high-priority remediation targets since exploits are actively in use.
- Source published
- First seen by Cybersecurity Tracker