The Hacker - ⚠️ CISA added two CVSS 9.8 flaws to its KEV list after active exploitation. One ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical CVSS 9.8 Flaws in Hikvision and Rockwell Automation Added to CISA KEV List CISA has added two critical vulnerabilities with a CVSS score of 9.8 related to Hikvision and Rockwell Automation to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation. Federal agencies are required to apply patches by March 26, 2026, to mitigate the risks associated with these vulnerabilities. 3 sources 71