CISA Adds One Known Exploited Vulnerability to Catalog (opens in new tab)

CISA Adds One Known Exploited Vulnerability to Catalog ggaylor May 22, 2026 Release DateMay 22, 2026 DescriptionCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.CVE-2026-9082 Drupal Core SQL Injection VulnerabilityThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. established the KEV Catalog as a living list of known Common Vu...