CISA has added the flaws, one of which is considered critical, to its Known Exploited Vulnerabilities catalog.