CISA added three actively exploited vulnerabilities to its Known Exploited Vulnerabilities Catalog: CVE-2021-22054 (Omnissa Workspace ONE SSRF), CVE-2025-26399 (SolarWinds Web Help Desk deserialization flaw), and CVE-2026-1603 (Ivanti EPM authentication bypass). Federal agencies must remediate these vulnerabilities per BOD 22-01, while CISA urges all organizations to prioritize remediation as part of vulnerability management practices.