CISA adds Cisco Catalyst SD-WAN, Arista EOS, and Google Chromium V8 flaws to its exploited vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added three vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-7473 in Arista EOS, CVE-2026-11645 in Google Chromium V8, and CVE-2026-20245 in Cisco Catalyst SD-WAN Manager. The source reports that the Arista EOS and Chromium V8 flaws have been actively exploited in the wild.