CISA Adds Two Actively Exploited Vulnerabilities to KEV Catalog

The Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) Catalog, adding two new actively exploited flaws: CVE-2025-68686 affecting Fortinet FortiOS and CVE-2026-16812 impacting Arista VeloCloud Orchestrator On-Prem. CISA emphasizes the critical need for organizations to prioritize immediate remediation of these vulnerabilities to mitigate ongoing cyber risks.