AI Summary

CISA added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog: CVE‑2026‑48939 in iCagenda and CVE‑2026‑56291 in Balbooa Forms, both allowing unrestricted upload of dangerous file types. The agency notes that such flaws are common attack vectors and pose significant risk to federal systems. Under Binding Operational Directive 26‑04, Federal Civilian Executive Branch agencies must prioritize rapid remediation of these high‑risk KEV entries on publicly exposed assets and assess whether threat actors compromised systems before patches are applied.

AI summaries can be wrong sometimes—always verify important details using the source article.