CISA Flags 6 Actively Exploited Bugs in Fortinet, Microsoft, and Adobe

CISA has added six vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild across products from Fortinet, Microsoft, and Adobe. Federal agencies are required to patch these flaws within mandated timelines under Binding Operational Directive 22-01.

The addition to the KEV catalog signals that threat actors are already leveraging these vulnerabilities in real-world attacks, making prompt patching critical for any organization running affected software - not just federal entities. Fortinet network appliances remain a persistent target given their prevalence at network perimeters, while Microsoft and Adobe products offer broad attack surface across enterprise environments.

Organizations should cross-reference the specific CVEs against their asset inventories and prioritize remediation immediately, particularly for internet-facing systems.