Technology

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

Cybersecurity and Infrastructure Security Agency + 1 other · Updated 10d ago

Facts

The vulnerabilities added to the KEV Catalog include CVE-2026-75650, CVE-2026-81963, CVE-2026-85880, and CVE-2026-86218. ^[2]
CVE-2026-75650 is an Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability. ^[2]
CVE-2026-81963 is a Microsoft Windows Link Following Vulnerability. ^[2]
CVE-2026-85880 is a Microsoft Windows Heap-Based Buffer Overflow Vulnerability. ^[2]
CVE-2026-86218 is an N-able N-central Static Code Injection Vulnerability. ^[2]

Primary source

Cybersecurity and Infrastructure Security Agency

Published Sep 2, 2026

Primary source

Cybersecurity and Infrastructure Security Agency

Published Sep 8, 2026