CISA Adds 8 Exploited Flaws to KEV, Sets April-May 2026 Federal Deadlines
Summary: CISA added eight vulnerabilities to its Known Exploited Vulnerabilities catalog on Monday, including three flaws in Cisco Catalyst SD-WAN Manager, citing evidence of active exploitation. Federal Civilian Executive Branch agencies were told to fix the three Cisco flaws by April 23, 2026, and the rest by May 4, 2026.
Why it matters: CERT-UA attributed exploitation of two Zimbra Collaboration Suite flaws to a threat actor tracked as UAC-0233, which gained access to mailbox contents, multi-factor authentication backup codes, application passwords, and the global address book. Cisco said it learned of exploitation of CVE-2026-20122 and CVE-2026-20128 in March 2026 but has yet to revise its advisory for CVE-2026-20133.