CISA Adds 8 Actively Exploited CVEs to Known Exploited Vulnerabilities Catalog
CISA added eight newly confirmed exploited vulnerabilities to its KEV catalog on April 22, 2026, covering enterprise VPN appliances, web frameworks, industrial control systems, and security products being actively weaponized in the wild.