CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog due to active exploitation. These vulnerabilities include issues in Red Hat Libuser, Red Hat Automatic Bug Reporting Tool, Microsoft SQL Server, Ajax.NET Professional, Linux Kernel, and Citrix NetScaler. Exploited vulnerabilities are frequently used by cyber actors and pose significant risks to federal systems. Federal Civilian Executive Branch agencies are required by Binding Operational Directive (BOD) 26-04 to prioritize the remediation of vulnerabilities listed in the KEV Catalog. This directive emphasizes addressing high-risk vulnerabilities on publicly exposed assets that grant complete control after exploitation. BOD 26-04 also outlines expectations for agencies regarding pre-patch compromise checks. While the directive applies specifically to FCEB agencies, CISA encourages all organizations to adopt this risk-based approach. CISA will continuously monitor and add new vulnerabilities to the KEV Catalog. Organizations can submit potential KEV additions that demonstrate exploitation and have clear mitigation.