CISA KEV Adds Exploited Flaws in Microsoft Excel, SharePoint, and Apache ActiveMQ
Active Exploitation · 2 sources · Updated 4mo ago · First seen Apr 14, 2026
CISA updated its Known Exploited Vulnerabilities catalog to add three newly listed flaws affecting Microsoft Office Excel, Microsoft SharePoint Server, and Apache ActiveMQ. The additions increased the catalog total from 1,566 to 1,569 entries across two updates, with CISA identifying CVE-2009-0238 as a remote code execution vulnerability in Excel, CVE-2026-32201 as an improper input validation spoofing issue in SharePoint Server, and CVE-2026-34197 as an improper input validation flaw in ActiveMQ that can enable code injection.
CISA assigned federal remediation deadlines of 2026-04-28 for the Excel and SharePoint entries and 2026-04-30 for the ActiveMQ entry. The catalog records indicate that known ransomware use is unknown for all three vulnerabilities, while the ActiveMQ listing references both an Apache security advisory and the NVD entry, underscoring active exploitation concerns for widely deployed enterprise software and messaging infrastructure.
