CISA Adds Two Actively Exploited Vulnerabilities to KEV Catalog
Summary
CISA added CVE-2026-48356 in Adobe Commerce and Magento and CVE-2026-111497 in Google Brotli to its KEV Catalog based on evidence of active exploitation, urging organizations to prioritize remediation.
Key points
- CISA added CVE-2026-48356, an unrestricted upload of file with dangerous type vulnerability in Adobe Commerce and Magento, to the KEV Catalog.
- CISA added CVE-2026-111497, an unchecked return value vulnerability in Google Brotli, to the catalog.
- CISA says both additions are based on evidence of active exploitation.
- BOD 26-04 requires FCEB agencies to prioritize remediation of specified high-risk KEV vulnerabilities on publicly exposed assets and sets expectations for checking whether systems were compromised before patching.
- CISA encourages all organizations to use risk-based vulnerability management and prioritize remediation of KEV vulnerabilities.
Article Details
- Vulnerability Types
- Unrestricted upload of file with dangerous type
- Unchecked return value
- Exploitation Status
- active
- Exploit Availability
- unknown
- Patch Status
- unknown