THREAT OPS › Threat News › CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA Adds Four Known Exploited Vulnerabilities to Catalog
<p>CISA has added four new vulnerabilities to its <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation. </p> <ul> <li><a href="https://www.cve.org/CVERecord?id=CVE-2025-25249" target="_blank">CVE-2025-25249</a> Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability</li>
MITRE ATT&CK techniques
- VulnerabilitiesT1588.006
Indicators of compromise
- CVE-2025-25249cve
- CVE-2026-19490cve
- CVE-2026-87491cve
- CVE-2026-20079cve
- https://www.cve.org/CVERecord?id=CVE-2025-25249url
- https://www.cve.org/CVERecord?id=CVE-2026-19490url
- https://www.cve.org/CVERecord?id=CVE-2026-87491url
- https://www.cve.org/CVERecord?id=CVE-2026-20079url
- https://cisasurvey.gov1.qualtrics.com/jfe/form/SV_1Zwu52kgK2OYf3wurl