CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CVE-2026-9586CVE-2026-48710CVE-2026-49869CVE-2026-59822CVE-2026-82329CVE-2026-83548CVE-2026-83549

September 2, 2026 · CISA (US-CERT) · Severity: HIGH

CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities catalog, including CVE-2026-9586, CVE-2026-82329, and others. These vulnerabilities are actively exploited and pose significant risks. Federal agencies must remediate them under BOD 26-04, and all organizations are encouraged to prioritize these vulnerabilities. 📌 **Analyst Note:** The addition of these CVEs to the KEV catalog underscores the urgency of patching. Organizations should cross-reference their asset inventory against this list and ensure timely remediation, especially for publicly exposed systems.

Key Takeaways

CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities catalog based on evidence of active exploitation, including CVE-2026-9586, CVE-2026-82329, and others.
These vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise and all organizations.
Federal agencies must remediate these vulnerabilities under Binding Operational Directive 26-04, and all organizations are encouraged to prioritize patching of KEV catalog entries.