CISA has added one of a pair of code injection vulnerabilities to the KEV catalogue as experts warn, “this is not a drill”.