CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog due to evidence of active exploitation. These vulnerabilities affect Palo Alto Networks PAN-OS, Cisco Secure Email Gateway, and Ahsay AhsayCBS. Exploited vulnerabilities are a common attack method for cyber actors that present substantial dangers to federal networks. Binding Operational Directive 26-04 mandates vulnerability management for Federal Civilian Executive Branch agencies, emphasizing the KEV Catalog. This directive requires agencies to prioritize fixing high-risk vulnerabilities listed in the KEV Catalog on publicly exposed assets. It also sets guidelines for agencies to check for system compromise before applying patches. Although BOD 26-04 is specific to FCEB agencies, CISA recommends all organizations use risk-based vulnerability management. CISA will continue to expand the KEV Catalog with vulnerabilities meeting its criteria. Organizations can nominate exploited vulnerabilities not currently in the KEV Catalog for potential inclusion. Nominated vulnerabilities must have a CVE ID, proof of exploitation, and clear mitigation steps.