CISA Orders Federal Agencies to Patch Exploited Windows Flaw CVE-2026-32202

Summary

CISA added Windows flaw CVE-2026-32202 to its KEV catalog and ordered federal agencies to patch by May 12. Akamai says it remained after an incomplete fix for CVE-2026-21510; APT28’s use of this flaw is unclear.

Key points

• CISA added CVE-2026-32202 to its Known Exploited Vulnerabilities catalog and ordered FCEB agencies to patch by May 12 under BOD 22-01.
• Akamai described CVE-2026-32202 as a zero-click credential-theft vector that remained after Microsoft's fix for CVE-2026-21510.
• CERT-UA linked APT28 to exploitation of CVE-2026-21510 in December 2025 attacks against Ukraine and EU countries; the reported exploit chain also targeted LNK flaw CVE-2026-21513.
• Microsoft says successful exploitation could let remote attackers view some sensitive information after a victim executes a malicious file.
• Microsoft flagged CVE-2026-32202 as exploited, but the article says it remains unclear whether APT28 used this specific flaw.
• CISA urged all organizations to prioritize remediation and advised applying vendor mitigations or discontinuing affected products if mitigations are unavailable.

MITRE ATT&CK

CVE

Threat Actors

Vendors

Products

Countries

Related Articles

• Proofpoint Observes 12 2026 CVEs in Exploitation, Four Not on CISA KEVproofpoint.comCVE-2026-21510 · CVE-2026-21513 · CVE-2026-32202 · APT28 · Microsoft Windows · T1204.002
• Pawn Storm Uses PRISMEX Malware and Exploits Microsoft Office Vulnerability in Campaign Targeting Ukraine and Alliestrendmicro.comCVE-2026-21513 · APT28 · Fancy Bear · Microsoft Windows · T1204.002
• Sekoia Traces APT28’s Tradecraft Evolution From X-Agent to LLM-Driven Malwareblog.sekoia.ioAPT28 · Fancy Bear · Microsoft Windows
• APT28’s Tradecraft Evolves from X-Agent to LLM-Driven Malwaresekoia.comAPT28 · Fancy Bear · Microsoft Windows
• BlueDelta Uses HOOKEDGE Backdoor in Campaigns Targeting European Government and Diplomatic Organizationsrecordedfuture.comAPT28 · Fancy Bear · T1204.002