# CISA Adds SonicWall and Microsoft Vulnerabilities to Its Catalog US Cybersecurity Agency urgently lists critical security flaws for remediation. - **Source:** [Security Affairs](https://brifing.si/source/e6c4f5ec-3e1b-4152-a932-056243bd56eb) - **Published:** 2026-07-15 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/ea067c68-195e-4ad7-9ad7-d70f4f3eb45e ## CISA's Catalog Update The US Cybersecurity and Infrastructure Security Agency (CISA) has added critical vulnerabilities in SonicWall and Microsoft products to its Known Exploited Vulnerabilities (KEV) catalog. This step aims to protect federal agencies from cyberattacks. ## SonicWall SMA1000 Vulnerabilities Two zero-day vulnerabilities discovered in SonicWall SMA1000 devices are being actively exploited by remote attackers. These flaws expose devices to serious risks such as unauthorized access and command execution. ## Microsoft Security Issues Vulnerabilities in Microsoft's Active Directory Federation Services and SharePoint Server have also been added to the catalog. These issues include authorization gaps and access control weaknesses. ## Urgent Remediation Process CISA has ordered federal agencies to patch these vulnerabilities by July 2026. Private sector organizations are also advised to review the catalog and take similar measures. ## Cybersecurity Warnings Experts emphasize that these vulnerabilities are actively exploited and organizations must act swiftly to protect their networks. Such flaws are critical in preventing cyberattacks. ## Conclusion and Importance CISA's update highlights the importance of quickly identifying and resolving cybersecurity vulnerabilities. A proactive approach by organizations can significantly reduce the risk of cyberattacks. ## Sources covering this story - https://securityaffairs.com/195383/security/u-s-cisa-adds-sonicwall-and-microsoft-flaws-to-its-known-exploited-vulnerabilities-catalog.html — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._