THE DAILY EDITION · 6 NOVEMBER 2026
CISA adds one new exploited vulnerability to KEV catalog
Why this story?
The catalog entry is a concrete federal alert tied to an actively exploited SonicWall flaw, not a broad policy statement.
The Cybersecurity and Infrastructure Security Agency said it added one new vulnerability to its Known Exploited Vulnerabilities catalog based on evidence of active exploitation. The entry is CVE-2026-19868, a SonicWall SonicOS SSLVPN use of single-factor authentication vulnerability.
CISA said the catalog is meant to track vulnerabilities that have been exploited in the wild and to help organizations prioritize remediation. The agency also said federal civilian executive branch agencies are required under Binding Operational Directive 26-04 to prioritize rapid remediation of high-risk vulnerabilities listed in the catalog, while it encourages other organizations to use the catalog in their own vulnerability management.
CISA said people aware of an exploited vulnerability not already in the catalog can submit it through the agency’s nomination form, and that potential additions must have a CVE ID, evidence of exploitation and clear mitigation guidance.