CISA's list that day

3 March 2026

On CISA added 2 vulnerabilities to its list of exploited vulnerabilities, in Qualcomm Multiple Chipsets and Broadcom VMware Aria Operations. US federal agencies must fix them by .

Added that day

Added that day
VulnerabilityProductOur groupListedDeadlineEPSS
CVE-2026-22719Command InjectionBroadcom VMware Aria OperationsPatch soon0.18
CVE-2026-21385Memory CorruptionQualcomm Multiple ChipsetsPatch soon0.01