LiveThreat Vulnerability Brief — CISA Adds Five Known Exploited Vulnerabilities to KEV Catalog
What It Is — CISA announced that five CVEs (CVE‑2017‑7921, CVE‑2021‑22681, CVE‑2021‑30952, CVE‑2023‑41974, CVE‑2023‑43000) have been added to its Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. Exploitability — All five are verified to be actively exploited; proof‑of‑concept code and real‑world attacks have been observed. CVSS scores range from moderate to critical depending on the CVE.
Affected Products — Hikvision cameras/NVRs (CVE‑2017‑7921); Rockwell Automation control‑system products (CVE‑2021‑22681); multiple Apple products including iOS, iPadOS, and other services (CVE‑2021‑30952, CVE‑2023‑41974, CVE‑2023‑43000).
TPRM Impact — Enterprises that embed these third‑party components—especially in manufacturing, critical infrastructure, and consumer‑facing mobile ecosystems—face heightened supply‑chain risk if the vulnerabilities remain unpatched, potentially leading to credential theft, device compromise, or broader network intrusion.
Recommended Actions — 1) Conduct an inventory of any Hikvision, Rockwell, or Apple products within your organization and its supply chain. 2) Verify patch status against the latest vendor advisories; apply patches or mitigations immediately. 3) Prioritize remediation of these KEV entries in accordance with CISA BOD 22‑01. 4) Update third‑party risk assessments to confirm that vendors have addressed the flaws and maintain continuous monitoring. Source: https://www.cisa.gov/news-events/alerts/2026/03/05/cisa-adds-five-known-exploited-vulnerabilities-catalog