CISA Adds Apple macOS and Microsoft SharePoint Vulnerabilities to Catalog
US cybersecurity agency updates its list of known exploited vulnerabilities with critical flaws.
1CISA Expands Critical Vulnerability Catalog
The US Cybersecurity and Infrastructure Security Agency (CISA) has added new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These include critical flaws in Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE services. With CVSS scores ranging from 9.1 to 9.8, these vulnerabilities pose serious risks like remote code execution and authentication bypass. CISA has ordered federal agencies to patch these flaws by August 21, 2026.
2Microsoft IKE Double Free Vulnerability
CVE-2026-33824 is a critical double-free vulnerability in Microsoft Internet Key Exchange (IKE) service extensions. Rated 9.8 on the CVSS scale, this flaw allows remote code execution. Systems with IKE enabled are at risk, though blocking UDP ports 500 and 4500 can mitigate external threats. However, internal attackers might still exploit it for lateral movement, making immediate patching crucial.
3SharePoint Authentication Bypass
CVE-2026-55040 targets weaknesses in Microsoft SharePoint's JWT token validation. With a 9.1 CVSS score, this flaw lets attackers forge tokens to impersonate any user, including administrators. Rapid7 researchers identified a chain of four distinct weaknesses enabling this exploit. Attackers can craft valid tokens using SharePoint's own STS certificate thumbprint without proper signature verification.
4VMware vCenter Path Traversal Flaw
CVE-2026-59310 is a critical path traversal vulnerability in Broadcom VMware vCenter. Rated 9.8 CVSS, this flaw allows network attackers to execute arbitrary code via the Syslog server. Broadcom confirmed that malicious actors with network access could exploit this issue. The company urges users to apply updates immediately.
5macOS Screen Sharing Authentication Issue
CVE-2026-65400 is an improper authentication vulnerability in macOS's built-in Screen Sharing feature. The Dutch National Cyber Security Centre confirmed active exploitation just two weeks after Apple released patches. The flaw allowed network attackers to access Screen Sharing without valid credentials. Apple addressed this in macOS Tahoe 26.6.1, Sequoia 15.7.9, and Sonoma 14.8.9 updates.
6Mandatory Patching for Federal Agencies
Under Binding Operational Directive (BOD) 22-01, CISA mandates federal agencies to patch these vulnerabilities by August 21, 2026. Private organizations are also advised to review the catalog and update their infrastructure. Experts warn that these flaws are being actively exploited, requiring urgent action to prevent potential breaches.
7Security Experts Sound Alarms
Researchers note that most vulnerabilities listed by CISA are already under active exploitation. Firms like Rapid7 and Defused observed attacks targeting SharePoint and VMware flaws in their honeypots. Bynario Atlas researcher Alfredo Pesoli discovered the macOS vulnerability. Experts urge all organizations to immediately update affected systems.
8Critical Steps in Cybersecurity
CISA's move represents a significant step in managing known exploited vulnerabilities. Mandatory patching policies for federal agencies aim to improve cybersecurity posture. Private sector adoption of this catalog could enhance overall cyber resilience. Experts emphasize that proactive security measures can substantially reduce the impact of cyberattacks.