AI Summary

CISA announced that its Known Exploited Vulnerabilities (KEV) Catalog now includes CVE‑2026‑0257, a Palo Alto Networks PAN‑OS authentication bypass flaw, after confirming active exploitation. The addition reflects the agency’s mandate under Binding Operational Directive 22‑01, which requires Federal Civilian Executive Branch agencies to remediate listed vulnerabilities by a set deadline. CISA urges all organizations, beyond the federal mandate, to prioritize timely remediation of KEV entries to lower exposure to cyber threats. The agency will continue updating the catalog as new exploited CVEs meet the criteria.

AI summaries can be wrong sometimes—always verify important details using the source article.