AI Summary

CISA announced that it has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog after confirming active exploitation. The added CVEs are CVE‑2021‑27137, a stack‑based buffer overflow in DD‑WRT; CVE‑2026‑0770, an inclusion of untrusted functionality in Langflow; CVE‑2026‑63030, a WordPress core interpretation conflict; and CVE‑2026‑60137, a WordPress core SQL injection. These vulnerabilities are common attack vectors that pose significant risks to federal systems. Under Binding Operational Directive 26‑04, federal civilian executive branch agencies must prioritize rapid remediation of high‑risk KEV-listed CVEs on publicly exposed assets that grant total control after exploitation.

AI summaries can be wrong sometimes—always verify important details using the source article.