The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added multiple vulnerabilities to its Known Exploited Vulnerabilities catalog, including flaws in Cisco Catalyst SD-WAN, Arista Extensible Operating System (EOS), and Google Chromium V8. Notably, the Arista EOS vulnerability, tracked as CVE-2026-7473, has a CVSS score of 6.9 and is considered an Incomplete Comparison with Missing Factors Vulnerability. This addition to the catalog indicates that these vulnerabilities are being actively exploited by threat actors, emphasizing the need for prompt mitigation. The inclusion of these flaws in the KEV catalog signifies a heightened risk, as CISA only adds vulnerabilities that have been confirmed to be exploited in the wild1. This development matters to security practitioners because it highlights the urgency of applying patches or implementing workarounds to prevent potential attacks, particularly for organizations using affected products.