All GovCon News

Historical technology archive

CISA KEV catalog update — October 20, 2026

From CDG’s Oct 21 company post: On October 20, CISA added six vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation:

Original LinkedIn publication
Added to CDG website
Historical LinkedIn post checked
Official source review
Current claims not revalidated
Archival photograph looking across the National Mall toward the U.S. Capitol, April 20, 2019.
Alternative archival Capitol photograph, April 20, 2019. This is a different contextual image from the original LinkedIn graphic. It does not depict the agency’s systems or an acquisition project. No endorsement implied.Photo: Thomson200, via Wikimedia Commons · Image source · Photo CC0 1.0 public-domain dedication

Original company post

Active exploitation should move a vulnerability up the queue.

On October 20, CISA added six vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation:

• Plex Media Server: CVE-2026-96652, CVE-2026-96654, CVE-2026-96655 and CVE-2026-96656 • EG Secure Solutions SiteGuard Server Edition: CVE-2026-106931 • Siemens Software Center: CVE-2026-110936

For teams supporting federal missions, practical next steps are to match the affected products against asset inventories, assess exposure and follow the applicable vendor remediation guidance. Keep the evidence of that review alongside the remediation record.

CISA’s alert explains that Binding Operational Directive 26-04 applies to Federal Civilian Executive Branch agencies. CISA also encourages all organizations to adopt risk-based vulnerability management and prioritize KEV remediation.

Read the official October 20 alert and follow its link to the live catalog for current guidance: https://lnkd.in/eDmKipH6

#FederalIT #VulnerabilityManagement #Cybersecurity #CyberDefenseGroup

Read the official source

Historical LinkedIn posts