CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-20316 Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (

Back to dashboard

Threat ModerateSingle SourceAgencyConf ConfirmedUnited States · North AmericaPublishedCERT

Original publisher

CERT

Original source URL

https://www.cisa.gov/news-events/alerts/2026/07/29/cisa-adds-one-known-exploited-vulnerability-catalog

Source country

United States

Reporting region

North America

Language

Institution

CISA US-CERT

Published (UTC)

Jul 29, 2026, 12:00 PM

Ingested (UTC)

Aug 3, 2026, 12:23 AM

Verification

Single Source

BASE INTEL aggregates public reporting. This item is not authored by BASE INTEL. Always review the original publisher before relying on the content.

CISA Adds One Known Exploited Vulnerability to Catalog
Advisory ID: node-25237
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation.   CVE-2026-20316 Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (
Severity: moderate
Published (UTC): 2026-07-29T12:00:00.000Z
Source: CERT
Original source: https://www.cisa.gov/news-events/alerts/2026/07/29/cisa-adds-one-known-exploited-vulnerability-catalog

View original source

Related reports on this event

Separate source reports grouped by topic. Conflicting claims remain distinct.

Threat ModerateSingle SourceAgency

Cyber

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-60004 Gitea Code Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Base

certadvisorynode-25351

CERTUnited States · North America

Aug 25, 2026, 12:00 PM UTC