CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update
Summary: CISA on Tuesday added four security flaws to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation in the wild. The additions include CVE-2026-2441, which Google acknowledged days earlier has an exploit in the wild, and CVE-2020-7796, which GreyNoise reported in March 2025 was being exploited by a cluster of about 400 IP addresses targeting instances in the U.S., Germany, Singapore, India, Lithuania, and Japan.
Why it matters: Federal Civilian Executive Branch agencies are directed to apply fixes by March 10, 2026, and the GreyNoise data shows roughly 400 IP addresses already working SSRF flaws like CVE-2020-7796 across six countries - the exploitation window is open now, not after the deadline.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2008-0015CVE-2020-7796CVE-2026-2441
- Related
- CVE-2026-2441: Google Chromium CSS Use-After-Free Vulnerability Known Exploited Vulnerabilities · Feb 17, 2026CVE-2008-0015: Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Feb 17, 2026CVE-2020-7796: Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability Known Exploited Vulnerabilities · Feb 17, 2026