cisa.govadvisoryCISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA alert of 28 October 2026 adding two vulnerabilities to the Known Exploited Vulnerabilities Catalog on evidence of active exploitation: CVE-2026-41709 (Broadcom VMware ESX insufficient logging) and CVE-2026-46300 (Linux kernel missing variable initialization). It restates BOD 26-04, which requires federal civilian agencies to prioritize fast remediation of KEV CVEs on exposed assets and to check for prior compromise. It also links the KEV nomination form.
TL;DR CISA adds an exploited VMware ESX logging flaw and a Linux kernel uninitialized-variable flaw to the KEV Catalog.
Organisations named here
- BOD 26-04
- CISA
CVEs named here
- CVE-2026-41709
- CVE-2026-46300
Technologies named here
- Known Exploited Vulnerabilities Catalog
- Binding Operational Directive 26-04
- Linux kernel
- CISA KEV
- Broadcom VMWare ESX (CVE-2026-41709, Insufficient Logging Vulnerability)
- KEV Nomination Form
- VMware ESX
Techniques named here
- Risk-based vulnerability management
- Compromise check before patching
Related in Threat Intel
huntress.comwriteupReverse Engineering the Six Stages of MacSync Stealer and RAT
huntress.comwriteupAI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
blog.talosintelligence.comtoolIntroducing CAIRN: Frontier tracking for AI-integrated malware (Cisco Talos)
huntress.comwriteup