Cyber Risks October 28, 2026 · CISA Advisories

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-41709 Broadcom VMWare ESX Insufficient Logging Vulnerability CVE-2026-46300 Linux Kernel Missing Initialization of a Variable Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch

Read the original at CISA Advisories ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-41709 CVE-2026-46300
Related: CVE-2026-46300: Linux Kernel Missing Initialization of a Variable Vulnerability Known Exploited Vulnerabilities · Oct 28, 2026
CVE-2026-41709: Broadcom VMWare ESX Insufficient Logging Vulnerability Known Exploited Vulnerabilities · Oct 28, 2026
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026