CISA adds two exploited vulnerabilities to its catalog

The US Cybersecurity and Infrastructure Security Agency on Friday added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities Catalog, a Check Point flaw affecting multiple products and an UnrealIRCd flaw, both with a November 16 remediation due date for federal agencies.

Why it matters: Catalog additions rest on evidence of active exploitation, and both entries require forensic triage before patching, which makes them a same-weekend action item for federal agencies and a priority check for any operator running the affected products.

Data as of CISA alert of November 13, 2026 and the catalog entries for the two vulnerabilities, both read in full in this run via the estate browser route after the direct fetch was refused. Developing item.

The Cybersecurity and Infrastructure Security Agency has added two vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. They are CVE-2026-123039, an incorrect permission assignment for a critical resource affecting multiple Check Point products, and CVE-2026-114713, an improper neutralization of delimiters vulnerability in UnrealIRCd.

Both entries carry a due date of November 16, 2026 for federal civilian agencies under Binding Operational Directive 26-04, and both require forensic triage, checking whether threat actors compromised the system before the patch was applied. CISA says such vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise, and it encourages all organizations to prioritize remediation of catalog vulnerabilities.

CISA adds two exploited vulnerabilities to its catalog

Sources