Skip to main content

CISA adds two vulnerabilities to its KEV Catalog

Source Decision Insights Coverage Published August 20, 2025 Companies 2
Human View Machine View

2 companies named across 9 categories, one of 91 articles referencing Cybersecurity and Infrastructure Security Agency (CISA). Previous coverage: Netskope highlights Scatted Spider tactics and AI security guidance (Aug 2025).

Companies mentioned

Best suited for

Persona
Security Operations Leader
Decision stage
How to start
Adoption curve
Early Adopters

Our classification, not the publisher's statement. Best suited for, not only for.

CISA has introduced two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, which are associated with active exploitation. This development holds importance for IT decision-makers tasked with managing cybersecurity risks.

Vulnerability Details

The first vulnerability is identified as CVE-2025-32433, which affects the Erlang/OTP Secure Shell (SSH) server. It is categorized as a Missing Authentication for Critical Function vulnerability.

The second vulnerability, CVE-2024-42009, pertains to a Cross-Site Scripting (XSS) vulnerability in RoundCube Webmail. Both vulnerabilities are potential targets for cyber actors looking to exploit weaknesses.

Context and Recommendations

Vulnerabilities like these are common avenues for cyberattacks and represent notable risks to federal operations. The Binding Operational Directive (BOD) 22-01 emphasizes the importance of the KEV Catalog and mandates that Federal Civilian Executive Branch (FCEB) agencies address vulnerabilities by specified dates to safeguard their networks.

While BOD 22-01 is aimed at FCEB agencies, CISA advises all organizations to minimize their vulnerability to cyber threats by ensuring prompt remediation of KEV Catalog entries. Vulnerabilities will continue to be updated in the catalog as they meet established criteria.

Conclusion

This update from CISA highlights the ongoing efforts to manage and reduce cybersecurity risks associated with known exploitable vulnerabilities. IT leaders should consider this information crucial for their risk management and vulnerability remediation strategies. This summary reflects a timely overview of the original blog post.

Blog post, originally published by Summary by StringerAI at decisioninsights.ai.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/cisa-adds-two-vulnerabilities-to-its-kev-catalog/",
        "name": "CISA adds two vulnerabilities to its KEV Catalog",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/cisa-adds-two-vulnerabilities-to-its-kev-catalog/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
      "name": "Department of Homeland Security"
    },
    "articleSection": [
      "Cybersecurity",
      "Data Center",
      "Network Operator"
    ],
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Operations Leader"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Adopters"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-coverage/#person",
      "@type": "Person",
      "name": "Decision Insights Coverage",
      "url": "https://decisioninsights.ai/author/decision-insights-coverage/"
    },
    "dateModified": "2026-08-23T12:11:05-06:00",
    "datePublished": "2025-08-20T14:56:38-06:00",
    "description": "CISA's KEV Catalog expands with two new vulnerabilities, urging organizations to prioritize remediation efforts for cybersecurity.",
    "headline": "CISA adds two vulnerabilities to its KEV Catalog",
    "isBasedOn": {
      "@type": "CreativeWork",
      "author": {
        "@type": "Person",
        "name": "Summary by StringerAI"
      },
      "url": "https://decisioninsights.ai/advisory/cisa-adds-two-vulnerabilities-to-its-catalog-3/2025/06/"
    },
    "keywords": [
      "Binding Operational Directive",
      "Cross-Site Scripting",
      "Known Exploited Vulnerabilities",
      "Remediation",
      "Secure Shell",
      "Vulnerabilities"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/cisa-adds-two-vulnerabilities-to-its-kev-catalog/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-23",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/",
        "name": "Cybersecurity and Infrastructure Security Agency (CISA)"
      },
      {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
        "name": "Department of Homeland Security"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-coverage/#person",
    "@type": "Person",
    "description": "Blog posts, podcasts, and video analysis from across the industry, condensed into short, sourced summaries. Produced under our Standards & Methodology.",
    "name": "Decision Insights Coverage",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-coverage/"
  }
]

Is this your company? Get structured data for your own pages