CISA Adds Four Known Exploited Vulnerabilities to Catalog

What happened

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CVE-2026-81963 Microsoft Windows Link Following Vulnerability CVE-2026-85880 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CVE-2026-86218...

Why it matters

The incident may affect operational continuity, asset safety or trust around Microsoft, Google. Watch for verified scope and remediation.

Affected entities

View evidence

3 reports · 1 original report · 1 independent

1. CISA Cybersecurity AdvisoriesPrimary source · Supports · EN · 100%
   CISA Adds Four Known Exploited Vulnerabilities to Catalog ↗Sep 8, 2026, 8:00 AM
2. CISA Cybersecurity AdvisoriesPrimary source · Supports · EN · 77%
   CISA Adds Four Known Exploited Vulnerabilities to Catalog ↗Sep 9, 2026, 8:00 AM
3. CISA Cybersecurity AdvisoriesPrimary source · Supports · EN · 61%
   CISA Adds Two Known Exploited Vulnerabilities to Catalog ↗Sep 10, 2026, 8:00 AM

Claims

• CISA Adds Four Known Exploited Vulnerabilities to Catalog Observed

Conflicts

No material conflict detected in the available evidence.

Timeline

1. September 8, 2026 at 8:00 AMFirst reported
2. Sep 10, 2026, 4:23 PMPrimary source · 48/83%

Market move following event

Market reaction is not yet available for this asset and time window.

Score explanation