@siddhesh_p If the Palo Alto firewall exploit sightings came through credible channels, and the investigations were correct (Palo Alto confirmed this, fwiw), it's right to add CVE-2026-109618 and CVE-2026-109619 to the KEV.

What I *don't* like about the KEV is that it doesn't give the most useful information to those who have the most meaningful exposure window: Palo Alto firewalls with their admin web interfaces exposed.

It's PATCH ALL THE THINGS.