CISA Adds CVE-2026-110447 to Known Exploited Vulnerabilities Catalog

CISA added CVE-2026-110447 to its Known Exploited Vulnerabilities Catalog on Oct. 23, 2026, based on evidence of active exploitation.

The agency said Binding Operational Directive (BOD) 26-04 applies to all FCEB agencies. It requires rapid remediation of KEV catalog vulnerabilities on publicly exposed assets that grant total control after exploitation. The directive also sets expectations for checking compromise before patching.