VulnOps

CISA added ten known exploited vulnerabilities to its catalog today, significantly expanding the list of threats requiring immediate prioritization in remediation workflows. These additions include a critical SQL injection vulnerability in Cisco Secure Email Gateway, underscoring active exploitation risks in widely-deployed email security infrastructure.

• →CISA KEV Catalog Expanded with Ten New Entries: Practitioners must immediately review these additions to update patch prioritization matrices and compliance timelines, as KEV designation indicates active exploitation in the wild.
• →Cisco Secure Email Gateway SQL Injection (CVE-2026-76461) Added to KEV Catalog: Email security infrastructure is a high-value target; this SQL injection vulnerability requires urgent assessment across deployed instances and expedited patching to prevent data exfiltration.
• →Increased KEV Catalog Activity Signals Rising Exploitation Pressure: The volume of new catalog additions suggests heightened threat actor activity, requiring vulnops teams to accelerate remediation cycles and strengthen vulnerability detection monitoring.

Review CISA's updated KEV catalog immediately, prioritize Cisco Secure Email Gateway patching, and adjust your remediation SLAs to reflect the accelerated exploitation timeline.