CISA Adds Four Known Exploited Vulnerabilities to Catalog
<p>CISA has added four new vulnerabilities to its <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation. </p> <ul> <li><a href="https://www.cve.org/CVERecord?id=CVE-2025-25249" target="_blank">CVE-2025-25249</a> Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability</li> <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-19490" target="_blank">CVE-2026-19490</a> Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability</li> <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-87491" target="_blank">CVE-2026-87491</a> Google Chromium V8 Out of Bounds Write Vulnerability</li> <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-20079"