Stocks

CISA Adds New Vulnerabilities to KEV Catalog, Mandates Remediation

Guavy AI Editorial Team Published August 14, 2026

Instruments

CSCO

The US Cybersecurity and Infrastructure Security Agency (CISA) has added three newly discovered vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These include a critical SQL injection flaw in Metabase, a use-after-free bug in the Windows Ancillary Function Driver for WinSock, and a heap inspection weakness in Cisco Secure Firewall.

The CISA's KEV catalog mandates federal agencies to address these vulnerabilities by August 14, 2026, with an extended deadline of August 25 for the Windows flaw. Private organizations are also strongly advised to review the KEV catalog and take necessary precautions.

The Metabase vulnerability allows unauthenticated attackers to gain administrator access and exfiltrate sensitive data, while the Cisco flaw could lead to denial-of-service conditions. The Windows bug enables SYSTEM-level code execution, highlighting the severity of these issues.

CISA Adds New Vulnerabilities to KEV Catalog, Mandates Remediation

SanDisk Soars Past 500% Gain as JPMorgan Sees 47% More Upside

JPMorgan Chase Surpasses Berkshire Hathaway in Dividend Potential

JPMorgan Charges into Germany's Crowded Digital Banking Market