Cybersecurity articles tagged #KEV Catalog on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/cisa-bod-26-04-prioritizing-kev-catalog-vulnerability-patchinghttps://runtimerebel.com/blog/cisa-bod-26-04-prioritizing-kev-catalog-vulnerability-patchingCISA's BOD 26-04 mandates federal agencies prioritize patching vulnerabilities in the KEV catalog. Learn its impact and how to enhance your vulnerability management.Thu, 11 Jun 2026 13:35:38 GMTCISABOD 26 04Vulnerability ManagementKEV CatalogFederal AgenciesPatch Managementhttps://runtimerebel.com/blog/cisa-updates-federal-patching-mandates-to-combat-ai-driven-threatshttps://runtimerebel.com/blog/cisa-updates-federal-patching-mandates-to-combat-ai-driven-threatsCISA updates federal directive to require 3-day patching for critical flaws, addressing the rapid exploitation speeds enabled by artificial intelligence.Thu, 11 Jun 2026 09:42:21 GMTCISABOD 22 01Vulnerability ManagementAI ThreatsKEV Cataloghttps://runtimerebel.com/blog/cve-2026-0300-palo-alto-networks-pan-os-out-of-bounds-write-exploithttps://runtimerebel.com/blog/cve-2026-0300-palo-alto-networks-pan-os-out-of-bounds-write-exploitCISA adds CVE-2026-0300, a Palo Alto Networks PAN-OS out-of-bounds write vulnerability, to its KEV Catalog due to active exploitation.Wed, 06 May 2026 20:37:19 GMTCVE-2026-0300Palo Alto NetworksPAN OSOut of Bounds WriteKEV CatalogActive Exploitationhttps://runtimerebel.com/blog/cisa-kev-update-exchange-server-adobe-ms-windows-exploitshttps://runtimerebel.com/blog/cisa-kev-update-exchange-server-adobe-ms-windows-exploitsCISA adds seven vulnerabilities, including critical Microsoft Exchange Server deserialization, to its Known Exploited Vulnerabilities Catalog, urging immediate…Tue, 14 Apr 2026 00:47:03 GMTCVE-2012-1854CVE-2020-9715CVE-2023-21529CVE-2023-36424CVE-2025-60710CVE-2026-21643CVE-2026-34621Microsoft Exchange ServerAdobe AcrobatMicrosoft WindowsFortinetCISAKEV CatalogDeserializationUse After FreeSQL Injectionhttps://runtimerebel.com/blog/cve-2026-20131-cisco-fmc-scc-deserialization-vulnerability-under-active-attackhttps://runtimerebel.com/blog/cve-2026-20131-cisco-fmc-scc-deserialization-vulnerability-under-active-attackCISA adds CVE-2026-20131, a critical deserialization vulnerability in Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC), to KEV Catalog due…Fri, 20 Mar 2026 16:21:47 GMTCVE-2026-20131Cisco Secure Firewall Management CenterCisco Security Cloud ControlDeserializationKEV Cataloghttps://runtimerebel.com/blog/cve-2026-20963-microsoft-sharepoint-deserialization-exploit-patch-nowhttps://runtimerebel.com/blog/cve-2026-20963-microsoft-sharepoint-deserialization-exploit-patch-nowCISA adds CVE-2026-20963, a Microsoft SharePoint deserialization vulnerability, to its KEV catalog due to active exploitation.Wed, 18 Mar 2026 20:17:46 GMTCVE-2026-20963Microsoft SharePointDeserialization VulnerabilityKEV CatalogActive Exploitationhttps://runtimerebel.com/blog/cve-2026-3909-cve-2026-3910-actively-exploited-google-vulnerabilitieshttps://runtimerebel.com/blog/cve-2026-3909-cve-2026-3910-actively-exploited-google-vulnerabilitiesCISA added two Google vulnerabilities (Skia Out-of-Bounds Write, Chromium V8 unspecified) to its KEV Catalog due to active exploitation. Patch now.Fri, 13 Mar 2026 20:15:47 GMTCVE-2026-3909CVE-2026-3910Google SkiaGoogle Chromium V8KEV CatalogVulnerability Managementhttps://runtimerebel.com/blog/cve-2025-68613-n8n-improper-code-control-actively-exploitedhttps://runtimerebel.com/blog/cve-2025-68613-n8n-improper-code-control-actively-exploitedCISA adds CVE-2025-68613, an n8n vulnerability involving improper control of dynamically-managed code, to its KEV Catalog due to active exploitation.Wed, 11 Mar 2026 20:15:24 GMTCVE-2025-68613N8nKEV CatalogImproper Control of Dynamically Managed Code Resourceshttps://runtimerebel.com/blog/cisa-alert-cve-2026-25108-soliton-filezen-os-command-injection-exploitedhttps://runtimerebel.com/blog/cisa-alert-cve-2026-25108-soliton-filezen-os-command-injection-exploitedCISA adds CVE-2026-25108, a Soliton Systems FileZen OS Command Injection vulnerability, to KEV Catalog due to active exploitation. Immediate remediation advised.Wed, 25 Feb 2026 04:44:11 GMTCVE-2026-25108Soliton SystemsFileZen OSCommand InjectionKEV CatalogActive Exploitation