CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added a Fortinet multiple-products path traversal flaw (CVE-2025-61624) and a BeyondTrust Remote Support authentication bypass (CVE-2026-102764) to its Known Exploited Vulnerabilities catalog based on evidence of active exploitation. Under Binding Operational Directive 26-04, federal civilian agencies must prioritize remediation of KEV-listed flaws on publicly exposed assets.