Skip to main content

CISA updates Known Exploited Vulnerabilities Catalog

Source Decision Insights Coverage Published August 20, 2025 Companies 2
Human View Machine View

2 companies named across 4 categories, one of 92 articles referencing Cybersecurity and Infrastructure Security Agency (CISA). Previous coverage: CISA adds two vulnerabilities to its KEV Catalog (Aug 2025).

Companies mentioned

Best suited for

Persona
Security Operations Leader
Decision stage
How to start
Adoption curve
Early Majority

Our classification, not the publisher's statement. Best suited for, not only for.

CISA has listed two new vulnerabilities in its Known Exploited Vulnerabilities (KEV) Catalog due to confirmed active exploitation. This development is crucial for IT decision-makers as it reflects ongoing cybersecurity challenges.

Vulnerabilities Identified

The two newly identified vulnerabilities are CVE-2025-43200, related to unspecified issues in Apple products, and CVE-2023-33538, a command injection vulnerability affecting multiple TP-Link routers. These vulnerabilities are noted for being common entry points for cyber threats.

Impact on Federal Agencies

According to Binding Operational Directive (BOD) 22-01, federal agencies must address vulnerabilities identified in the KEV Catalog within specified timelines. This directive aims to safeguard Federal Civilian Executive Branch networks against imminent cyber threats.

Recommendations for Organizations

While BOD 22-01 specifically pertains to FCEB agencies, CISA encourages all organizations to prioritize the remediation of vulnerabilities listed in the KEV Catalog. Organizations are advised to incorporate these updates into their vulnerability management practices to mitigate potential cyber risks.

This overview underscores the importance of swift action regarding known vulnerabilities, highlighting CISA's commitment to maintaining a comprehensive catalog of active threats. This summary reflects a timely, fact-based account of the original blog post.

Blog post, originally published by Summary by StringerAI - Source: Cybersecurity and Infrastructure Security Agency (CISA) at decisioninsights.ai.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/cisa-updates-known-exploited-vulnerabilities-catalog/",
        "name": "CISA updates Known Exploited Vulnerabilities Catalog",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/cisa-updates-known-exploited-vulnerabilities-catalog/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
      "name": "Department of Homeland Security"
    },
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Operations Leader"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Majority"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-coverage/#person",
      "@type": "Person",
      "name": "Decision Insights Coverage",
      "url": "https://decisioninsights.ai/author/decision-insights-coverage/"
    },
    "dateModified": "2026-08-23T12:39:10-06:00",
    "datePublished": "2025-08-20T15:01:40-06:00",
    "description": "CISA updates the KEV Catalog, adding vulnerabilities in Apple products and TP-Link routers, urging timely remediation by organizations.",
    "headline": "CISA updates Known Exploited Vulnerabilities Catalog",
    "isBasedOn": {
      "@type": "CreativeWork",
      "author": {
        "@type": "Person",
        "name": "Summary by StringerAI - Source: Cybersecurity and Infrastructure Security Agency (CISA)"
      },
      "url": "https://decisioninsights.ai/advisory/cisa-adds-two-vulnerabilities-to-known-exploited-vulnerabilities-catalog/2025/06/"
    },
    "keywords": [
      "Binding Operational Directive",
      "Known Exploited Vulnerabilities",
      "Threats",
      "Vulnerabilities"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/cisa-updates-known-exploited-vulnerabilities-catalog/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-23",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/",
        "name": "Cybersecurity and Infrastructure Security Agency (CISA)"
      },
      {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
        "name": "Department of Homeland Security"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-coverage/#person",
    "@type": "Person",
    "description": "Blog posts, podcasts, and video analysis from across the industry, condensed into short, sourced summaries. Produced under our Standards & Methodology.",
    "name": "Decision Insights Coverage",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-coverage/"
  }
]

Is this your company? Get structured data for your own pages