CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog, Urges Fixes by February 25

These include forced browsing in Apache OFBiz (CVE-2024-45195), information disclosure in Microsoft .NET Framework (CVE-2024-29059), and OS command injection and local file inclusion in Paessler PRTG Network Monitor (CVE-2018-9276, CVE-2018-19410).