CISA has added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, indicating active exploitation in the wild. These include an improper authentication flaw in Apple macOS (CVE-2026-65400), a SharePoint vulnerability, a vCenter flaw, and a Microsoft IKE vulnerability. Federal agencies are mandated to patch these issues promptly due to the high risk of compromise.