CISA Adds Four Known Exploited Vulnerabilities to Catalog

What happened

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability CVE-2026-55040 Microsoft SharePoint Weak Authentication Vulnerability CVE-2026-59310 Broadcom VMware vCenter Path Traversal Vulnerability CVE-2026-65400 Apple macOS Improper...

Why it matters

The incident may affect operational continuity, asset safety or trust around Microsoft, Apple. Watch for verified scope and remediation.

Affected entities

View evidence

2 reports · 1 original report · 1 independent

1. CISA Cybersecurity AdvisoriesPrimary source · Supports · EN · 61%
   CISA Adds Four Known Exploited Vulnerabilities to Catalog ↗Aug 18, 2026, 8:00 AM
2. CISA Cybersecurity AdvisoriesPrimary source · Supports · EN · 100%
   CISA Adds Two Known Exploited Vulnerabilities to Catalog ↗Aug 20, 2026, 8:00 AM

Claims

• CISA Adds Four Known Exploited Vulnerabilities to Catalog Observed

Conflicts

No material conflict detected in the available evidence.

Timeline

1. August 18, 2026 at 8:00 AMFirst reported
2. Aug 21, 2026, 8:21 AMPrimary source · 45/83%

Market move following event

Market reaction is not yet available for this asset and time window.

Score explanation