The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified four critical vulnerabilities that are currently being exploited in the wild, prompting immediate action.
Let’s take a closer look at these vulnerabilities added to the Known Exploited Vulnerabilities (KEV) catalog:
- CVE-2026-65400 (CVSS score: 9.8) – This vulnerability in Apple macOS allows unauthorized network access to Screen Sharing without valid credentials.
- CVE-2026-55040 (CVSS score: 9.1) – Microsoft SharePoint is affected by a weak authentication flaw that enables unauthorized access over a network.
- CVE-2026-59310 (CVSS score: 9.8) – A path traversal vulnerability in Broadcom VMware vCenter permits the execution of arbitrary code by threat actors.
- CVE-2026-33824 (CVSS score: 9.8) – A double free vulnerability in Microsoft Internet Key Exchange (IKE) Service Extensions allows attackers to execute code over a network.
While patches have been released by the vendors to address these vulnerabilities, they have already been exploited in various cyber attacks.
Exploitation of the Apple macOS vulnerability has been linked to the delivery of a Monero cryptocurrency miner, while the Microsoft SharePoint flaw has been used by unidentified attackers following the release of a proof-of-concept code.
The vulnerability affecting VMware vCenter has been exploited by a suspected China-based advanced persistent threat (APT) group, leading to the deployment of backdoors and ransomware.
These attacks have affected 361 unique IP addresses across 47 countries, with a significant number of infections reported in Germany, the U.S., Turkey, Iran, and France.
Furthermore, Palo Alto Networks Unit 42 has observed exploitation of CVE-2026-33824 by a Chinese-speaking threat actor, who has conducted autonomous hacking campaigns using DeepSeek along with manual operations exploiting known vulnerabilities.
For Federal Civilian Executive Branch (FCEB) agencies, it is essential to update vulnerable systems by August 21, 2026, to ensure optimal protection against these threats.
