CISA Adds Four Actively Exploited Flaws to KEV Catalog
Active Exploitation · 14 sources · Updated 2mo ago · First seen Aug 18, 2026
CISA added four vulnerabilities to its Known Exploited Vulnerabilities catalog, raising the total from 1666 to 1670 entries and flagging active exploitation affecting Microsoft Internet Key Exchange (IKE) Service Extensions, Microsoft SharePoint, Broadcom VMware vCenter, and Apple macOS Screen Sharing. The newly listed issues are CVE-2026-33824, CVE-2026-55040, CVE-2026-59310, and CVE-2026-65400, covering weaknesses that can enable remote code execution, path traversal, weak authentication, or improper authentication.
Under BOD 22-01, CISA directed U.S. federal agencies to remediate all four flaws by 2026-08-21 and urged other organizations to review exposure and apply available fixes. Reporting on the update said the SharePoint issue is tied to a JWT forgery attack chain, while the macOS Screen Sharing flaw was confirmed as actively exploited by the Dutch National Cyber Security Centre; Apple has already released patches, and CISA's KEV data indicates ransomware use is currently unknown for all four CVEs.
