⚠️ New in CISA KEV this week — exploited in the wild: • WSO2 Multiple Products Path… — CVSS 10 • Cisco Catalyst SD-WAN Manager Hex… — CVSS 9.8 • Citrix NetScaler Improper… — CVSS 9.8

⚠️ New in CISA KEV this week — exploited in the wild: • Arista VeloCloud Orchestrator… — CVSS 10 • F5 BIG-IP APM Heap-based Buffer… — CVSS 9.8 • Check Point Multiple Products… — CVSS 9.8

⚠️ New in CISA KEV this week — exploited in the wild: • Cisco Identity Services Engine… — CVSS 10 • GitLab Community Edition and… — CVSS 10 • ConnectWise ScreenConnect Improper… — CVSS 9.9

⚠️ New in CISA KEV this week — exploited in the wild: • Cisco Firewall Management Center… — CVSS 10 • N-able N-central Static Code Injection — CVSS 10 • Adobe Commerce and Magento Improper… — CVSS 10

⚠️ New in CISA KEV this week — exploited in the wild: • SonicWall SMA1000 Appliances… — CVSS 10 • Kestra OSS OS Command Injection — CVSS 10 • JFrog Artifactory Improper… — CVSS 9.8

⚠️ New in CISA KEV this week — exploited in the wild: • Metabase SQL Injection — CVSS 10 • Progress LoadMaster Command Injection — CVSS 9.8 • Microsoft Windows Ancillary Function Driver… — CVSS 8.8

⚠️ New in CISA KEV this week — exploited in the wild: • Arista VeloCloud Orchestrator… — CVSS 10 • Fortinet FortiOS Exposure of… — CVSS 5.9 • Cisco Secure Firewall Management… — CVSS 5.3

⚠️ New in CISA KEV this week — exploited in the wild: • WordPress Core SQL Injection — CVSS 10 • WordPress Core Interpretation Conflict — CVSS 10 • Microsoft SharePoint Deserialization of… — CVSS 9.8

⚠️ New in CISA KEV this week — exploited in the wild: • SonicWall SMA1000 Appliances Code… — CVSS 10 • SonicWall SMA1000 Appliances… — CVSS 10 • Balbooa Forms Unrestricted Upload… — CVSS 10