Hacker-City
Hacker-City
Get the brief
Technology|April 25, 2026|1 min read

CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline

The Cybersecurity and Infrastructure Security Agency (CISA) has added four new exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, giving federal agencies until May 2026 to address these security flaws.

#CISA#KEV#cybersecurity#vulnerabilities#federal agencies#exploits#security patches#infrastructure security#network security

CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline

Author: Ravie Lakshmanan
Date: April 25, 2026
Categories: Network Security / Infrastructure Security

The Cybersecurity and Infrastructure Security Agency (CISA) has added four new exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, establishing a May 2026 deadline for federal agencies to implement necessary security patches and mitigations.

This latest update to the KEV catalog highlights ongoing cybersecurity threats that are actively being exploited in the wild, requiring immediate attention from federal agencies and organizations across critical infrastructure sectors.

Share this story

Next story

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added CVE-2026-41940, a WebPros cPanel & WHM and WP2 missing authentication vulnerability, to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation.