Skip to main content

CISA adds two vulnerabilities to its catalog

Source Decision Insights Coverage Published September 2, 2025 Companies 4
Human View Machine View

4 companies named across 5 categories, one of 3 articles referencing WhatsApp. Previous coverage: CISA adds two vulnerabilities to its catalog (Sep 2025).

Companies mentioned

Best suited for

Persona
Security Operations Leader
Decision stage
Which to buy
Adoption curve
Late Majority

Our classification, not the publisher's statement. Best suited for, not only for.

The Cybersecurity and Infrastructure Security Agency (CISA) has incorporated two vulnerabilities into its Known Exploited Vulnerabilities (KEV) Catalog, following evidence of active exploitation. This update is pertinent for IT decision-makers concerning cybersecurity practices.

Vulnerabilities Identified

Two new vulnerabilities have been recognized by CISA. The first is identified as CVE-2020-24363, which pertains to a security loophole in the TP-link TL-WA855RE related to missing authentication for critical functions.

The second is CVE-2025-55177, associated with WhatsApp, a product of Meta Platforms, highlighting incorrect authorization vulnerabilities.

Implications for Federal Agencies

These vulnerabilities represent common attack vectors exploited by cyber criminals and may pose risks to federal entities. According to the Binding Operational Directive (BOD) 22-01, the KEV Catalog serves as an ongoing inventory of Common Vulnerabilities and Exposures (CVE) (CVEs) necessitating prompt remediation to mitigate active threats.

While BOD 22-01 applies specifically to Federal Civilian Executive Branch (FCEB) agencies, CISA recommends all organizations actively manage their cybersecurity by addressing KEV Catalog vulnerabilities efficiently. Continued updates to the catalog will occur as new vulnerabilities are identified that meet established criteria.

Conclusion

This development underscores the importance of ongoing vigilance in vulnerability management practices. CISA’s addition of these vulnerabilities to the KEV Catalog emphasizes the need for proactive measures in cybersecurity. This summary reflects a timely, fact-based overview of CISA's recent blog update.

Blog post, originally published by Summary by StringerAI - Source: Cybersecurity and Infrastructure Security Agency (CISA) at decisioninsights.ai.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "legalName": "Wiretap Labs, LLC",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/cisa-adds-two-vulnerabilities-to-its-catalog-5/",
        "name": "CISA adds two vulnerabilities to its catalog",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/cisa-adds-two-vulnerabilities-to-its-catalog-5/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
      "name": "Department of Homeland Security"
    },
    "articleSection": [
      "Cybersecurity"
    ],
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Operations Leader"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Late Majority"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-coverage/#person",
      "@type": "Person",
      "name": "Decision Insights Coverage",
      "url": "https://decisioninsights.ai/author/decision-insights-coverage/"
    },
    "dateModified": "2026-08-23T14:59:45-06:00",
    "datePublished": "2025-09-02T14:37:50-06:00",
    "description": "CISA adds CVE-2020-24363 and CVE-2025-55177 to its Known Exploited Vulnerabilities Catalog due to active exploitation risks.",
    "headline": "CISA adds two vulnerabilities to its catalog",
    "isBasedOn": {
      "@type": "CreativeWork",
      "author": {
        "@type": "Person",
        "name": "Summary by StringerAI - Source: Cybersecurity and Infrastructure Security Agency (CISA)"
      },
      "url": "https://decisioninsights.ai/advisory/cisa-adds-two-vulnerabilities-to-its-catalog-4/2025/09/"
    },
    "keywords": [
      "Binding Operational Directive",
      "Common Vulnerabilities and Exposures",
      "Known Exploited Vulnerabilities",
      "Vulnerabilities"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/cisa-adds-two-vulnerabilities-to-its-catalog-5/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-23",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/",
        "name": "Cybersecurity and Infrastructure Security Agency (CISA)"
      },
      {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
        "name": "Department of Homeland Security"
      },
      {
        "@id": "https://decisioninsights.ai/registry/facebook/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/facebook/",
        "name": "Meta Platforms"
      },
      {
        "@id": "https://decisioninsights.ai/registry/facebook/whatsapp/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/facebook/whatsapp/",
        "name": "WhatsApp"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-coverage/#person",
    "@type": "Person",
    "description": "Blog posts, podcasts, and video analysis from across the industry, condensed into short, sourced summaries. Produced under our Standards & Methodology.",
    "name": "Decision Insights Coverage",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-coverage/"
  }
]

Is this your company? Get structured data for your own pages