CISA Adds Seven Exploited Flaws to Known Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added seven security flaws to its Known Exploited Vulnerabilities (KEV) catalog, including critical vulnerabilities in SonicWall SMA 1000 Appliances (CVE-2026-83548, CVSS 10.0) and a post-authentication command injection flaw (CVE-2026-83549, CVSS 7.8). This update follows a new policy (BOD 26-04) that can compress remediation windows for federal agencies.