Apr 292026 CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV CISA added two actively exploited CVEs to KEV after confirmed attacks, mandating FCEB patching by May 12, 2026.