CISA has updated its Known Exploited Vulnerabilities (KEV) Catalog with a new vulnerability. This addition, CVE-2021-43798, involves a Grafana path traversal vulnerability. Path traversal vulnerabilities are often exploited by malicious actors, posing a serious risk. The KEV Catalog, created by Binding Operational Directive (BOD) 22-01, identifies high-risk vulnerabilities. BOD 22-01 mandates that Federal Civilian Executive Branch (FCEB) agencies address these vulnerabilities promptly. This remediation aims to safeguard FCEB networks from ongoing cyber threats. The directive includes specific deadlines for patching known vulnerabilities. While targeting FCEB agencies, CISA encourages all organizations to prioritize KEV Catalog vulnerabilities. This proactive approach can significantly decrease exposure to cyberattacks and strengthen overall security. CISA plans to continuously expand the catalog with vulnerabilities meeting defined criteria.