The U.S. Cybersecurity and Infrastructure Security Agency added four security flaws on Tuesday to its Known exploited Vulnerabilities catalog (KEV), citing evidence of active exploitation.
The list of vulnerabilities includes:
CVE-2024-45194 (CVSS score: 7.8/9.8) – A forced browsing vulnerability that allows remote attackers to access unauthorized information.