CISA has updated its Known Exploited Vulnerabilities (KEV) Catalog, adding a new vulnerability. The newly added vulnerability is CVE-2026-0257, a Palo Alto Networks PAN-OS authentication bypass. This vulnerability is actively exploited by malicious actors, posing a significant risk. The KEV Catalog is a list of vulnerabilities considered high risk. The KEV Catalog was created by Binding Operational Directive (BOD) 22-01. BOD 22-01 directs Federal Civilian Executive Branch (FCEB) agencies to remediate KEV vulnerabilities promptly. Agencies must meet deadlines to protect their networks from active threats. CISA encourages all organizations, not just FCEB agencies, to prioritize KEV remediation. Timely remediation helps organizations reduce their cyberattack exposure. CISA will continue to update the catalog with new vulnerabilities that fit the criteria.