CISA has updated its Known Exploited Vulnerabilities (KEV) Catalog, adding a new vulnerability. The newly added vulnerability is CVE-2026-0300, an out-of-bounds write vulnerability in Palo Alto Networks PAN-OS. This type of vulnerability is frequently exploited by malicious actors, presenting substantial risk to the federal enterprise. The KEV Catalog is a list of known CVEs that pose significant threats, established by Binding Operational Directive (BOD) 22-01. BOD 22-01 mandates that Federal Civilian Executive Branch (FCEB) agencies remediate KEV vulnerabilities by specified deadlines. This action aims to safeguard FCEB networks from ongoing cyber threats. While BOD 22-01 primarily affects FCEB agencies, CISA recommends all organizations prioritize KEV Catalog vulnerability remediation. Timely addressing of these vulnerabilities is crucial for reducing cyberattack exposure. CISA will continue to incorporate vulnerabilities that meet the necessary criteria into the KEV catalog.