CISA adds 8 vulnerabilities to KEV — three in Cisco SD‑WAN; federal deadlines Apr–May 2026

Colleagues, a cybersecurity alert: CISA added eight vulnerabilities to the KEV catalog, including three affecting Cisco Catalyst SD‑WAN Manager.

Key points:
- Vulnerabilities identified in PaperCut, TeamCity, Quest KACE, Zimbra, Kentico, and three Cisco issues.
- Some are actively exploited; vendors report abuse.
- FCEB must remediate the three Cisco CVEs by 23 Apr 2026; remaining CVEs by 4 May 2026.

Why it matters: delaying patches raises the risk of compromise and data leakage.
How do you prioritize patches in such cases?
#cybersecurity #vulnerabilitymanagement #patchmanagement #threatintelligence