VulnerabilitiesAug 19, 2026

CISA Adds One Known Exploited Vulnerability to Catalog

CISA adds CVE-2026-64849 MLflow SSRF vulnerability to KEV Catalog.

CISA has added CVE-2026-64849, an MLflow Server-Side Request Forgery vulnerability, to its Known Exploited Vulnerabilities (KEV) Catalog due to evidence of active exploitation. This addition mandates Federal Civilian Executive Branch (FCEB) agencies to prioritize its remediation under Binding Operational Directive (BOD) 26-04, which emphasizes risk-based vulnerability management for publicly exposed assets. CISA encourages all organizations to adopt similar practices.

AI summary of the linked source. Not reviewed by an editor. How this works

Read at source

Vendor Watch

Run CISA?

Get an email when a new story names CISA, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works Privacy

The lesson from this incident

Full lesson

CVE-2026-64849, a Server-Side Request Forgery (SSRF) vulnerability in MLflow, has been added to CISA's Known Exploited Vulnerabilities Catalog due to confirmed active exploitation in the wild. SSRF vulnerabilities allow attackers to manipulate a server into making unauthorized internal requests, potentially exposing sensitive internal resources, credentials, or cloud metadata endpoints. The fact that this vulnerability is being actively exploited means organizations that have not patched are at immediate and tangible risk. CISA's KEV Catalog addition underscores the importance of risk-based vulnerability prioritization — especially for internet-facing assets — rather than treating all vulnerabilities with equal urgency. Delayed remediation of known-exploited vulnerabilities significantly increases the probability of a successful breach.

What helps against this

How we list vendors

Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
For exampleQualys VMDR Axonius Exposures Holm Security Platform all options
Automated patch management
Known holes get closed in days, not months.
For exampleIvanti Neurons for Patch Management Action1 Patch Management Microsoft Intune all options
Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
For exampleDataminr Threat Intelligence CrowdStrike Falcon Adversary Intelligence Dataminr Agentic Threat Intelligence Platform all options

Indicators of Compromise

Extracted by AI from the linked source. Not reviewed by an editor. How this works

cve — CVE-2026-64849

Entities

MLflow (product)Server-Side Request Forgery (technology)CISA (vendor)