Jan 242026 CISA Updates KEV Catalog with Four Actively Exploited Software Vulnerabilities CISA added four actively exploited vulnerabilities to its KEV catalog, urging U.S. federal agencies to apply fixes by February 12, 2026.