CISA Adds Two New Exploited Vulnerabilities to Catalog, Urges Federal Agencies to Remediate

The Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities, CVE-2026-88771 and CVE-2026-88772, to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CISA emphasizes that these vulnerabilities are frequent attack vectors and pose significant risks, requiring Federal Civilian Executive Branch (FCEB) agencies to prioritize their rapid remediation.