CISA's list that day
12 February 2026
On CISA added 4 vulnerabilities to its list of exploited vulnerabilities, in Microsoft Configuration Manager, Notepad++, SolarWinds Web Help Desk and 1 other product. The US federal deadlines run from to .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2025-40536Security Control Bypass | SolarWinds Web Help Desk | Patch this weekMetasploit module; EPSS 0.74 | 0.74 | ||
| CVE-2024-43468SQL Injection | Microsoft Configuration Manager | Patch this weekEPSS 0.81 | 0.81 | ||
| CVE-2025-15556Download of Code Without Integrity Check | Notepad++ Notepad++ | Patch soon | 0.02 | ||
| CVE-2026-20700Multiple Buffer Overflow | Apple Multiple Products | Patch soon | 0.01 |