AI Summary

CISA announced that four vulnerabilities have been added to its Known Exploited Vulnerabilities catalog after confirming active exploitation. The entries include two SonicWall SMA1000 appliance flaws—a server‑side request forgery (CVE‑2026‑15409) and a code‑injection issue (CVE‑2026‑15410)—and two Microsoft product issues—a granular access‑control weakness in Active Directory Federation Services (CVE‑2026‑56155) and a missing authentication flaw in SharePoint Server (CVE‑2026‑56164). The agency notes that such vulnerabilities are common attack vectors and that Federal Civilian Executive Branch agencies must follow Binding Operational Directive 26‑04 for risk‑based vulnerability management.

AI summaries can be wrong sometimes—always verify important details using the source article.