CISA Adds Three Actively Exploited Vulnerabilities (CVE-2023-49105, CVE-2026-53362, CVE-2026-66384) to KEV Catalog
What It Is — CISA announced that three vulnerabilities with documented active exploitation have been added to its Known Exploited Vulnerabilities (KEV) catalog. The flaws affect ownCloud (improper authentication), the Linux kernel (unspecified), and JFrog Artifactory (path‑traversal).
Exploitability — All three are confirmed to be exploited in the wild; CVSS scores range from 7.5 to 9.8 (per vendor advisories). No public proof‑of‑concept is required; threat actors are already leveraging them.
Affected Products — ownCloud server, Linux kernel (any distribution), JFrog Artifactory.
Why It Matters for Compliance & Audit Readiness
- SOC 2 auditors expect documented, risk‑based vulnerability management; KEV items are a clear “high‑risk” signal that must be tracked and remediated.
- Continuous evidence of patching (e.g., ticketing, change logs) satisfies CC6.1 (Change Management) and CC7.1 (System Operations) controls.
- Demonstrating rapid remediation of KEV entries strengthens the organization’s trust posture when responding to third‑party security questionnaires.
Recommended Actions
- Inventory all assets that run ownCloud, the Linux kernel, or JFrog Artifactory and map them to the relevant SOC 2 controls.
- Prioritize patching of the three CVEs per BOD 26‑04, capture change‑management tickets as audit evidence.
- Deploy continuous vulnerability scanning and integrate findings with your compliance dashboard to prove ongoing diligence.
Source: CISA Advisory – 2026‑08‑27