CISA Adds CVE-2026-114713 and CVE-2026-123039 to Known Exploited Vulnerabilities Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog after confirming active exploitation in the wild. The entries include CVE-2026-114713 affecting UnrealIRCd and CVE-2026-123039 impacting multiple Check Point products. These vulnerabilities are described as frequent attack vectors that can grant attackers full control of compromised assets. Federal Civilian Executive Branch agencies must follow BOD 26-04 requirements to prioritize remediation of KEV-listed issues on publicly exposed systems. The directive also requires agencies to verify whether threat actors have already compromised systems before applying patches. CISA encourages all organizations to adopt similar risk-based vulnerability management practices and provides a nomination form for submitting additional exploited vulnerabilities.
CISA AlertsNov 13, 2026Translated from English