CISA updated its Known Exploited Vulnerabilities (KEV) Catalog, adding a new vulnerability. The newly added vulnerability is CVE-2026-6973, concerning Improper Input Validation in Ivanti Endpoint Manager Mobile (EPMM). This vulnerability is actively being exploited by malicious actors, presenting a serious risk. The KEV Catalog is a list of known vulnerabilities that significantly threaten the federal enterprise. This catalog was established under Binding Operational Directive (BOD) 22-01. BOD 22-01 mandates Federal Civilian Executive Branch agencies to remediate identified vulnerabilities promptly. The goal is to safeguard FCEB networks from active cyber threats. CISA recommends that all organizations address KEV Catalog vulnerabilities. Prioritizing remediation is crucial for reducing exposure to cyberattacks. CISA emphasizes the importance of timely vulnerability management practices. The agency will continue to update the catalog with new vulnerabilities as they are discovered.