Two of the three newly-added CVEs affect firewall appliances common in small-business deployments. Federal agencies have 21 days to patch under the binding directive — a useful external deadline when recommending patch urgency to customers on the same hardware.
Source log
- CISA Known Exploited Vulnerabilities Catalog