CISA has added two new vulnerabilities, CVE-2026-12569 and CVE-2026-20230, to its Known Exploited Vulnerabilities (KEV) Catalog due to active exploitation. These vulnerabilities, affecting PTC Windchill/FlexPLM and Cisco Unified Communications Manager respectively, are common targets for cyberattacks. Federal Civilian Executive Branch (FCEB) agencies must adhere to Binding Operational Directive 26-04. This directive mandates prioritizing the rapid remediation of vulnerabilities listed in the KEV Catalog, particularly those on publicly exposed assets that offer complete control after exploitation. Agencies are also required to check for compromises before applying patches for high-risk vulnerabilities. While BOD 26-04 is for FCEB agencies, CISA strongly recommends all organizations adopt similar risk-based vulnerability management practices. CISA will continuously update the KEV Catalog with newly identified exploited vulnerabilities. Organizations can nominate vulnerabilities for inclusion if they have a CVE ID, proof of exploitation, and clear mitigation steps.