CISA Updates Known Exploited Vulnerabilities Catalog with Two New Entries

The Cybersecurity & Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. The new entries include a Fortinet FortiOS exposure of sensitive information vulnerability (CVE-2025-68686) and an Arista VeloCloud Orchestrator On-Prem OS command injection vulnerability (CVE-2026-16812).