Episode 176
CISA expands KEV catalog and posts ICS advisory; NOAA issues below-normal 2026 Atlantic hurricane outlook
Friday’s brief covers two new CISA Known Exploited Vulnerabilities and a fresh Industrial Control Systems advisory, the NOAA 2026 Atlantic hurricane outlook issued from Lakeland, ongoing CDC Health Alert Network guidance on Ebola Bundibugyo, and material wildfire and severe-weather operations across Arizona, California, Colorado, New Mexico, Oklahoma, and Texas, including a Denver International ground stop and a statewide South Texas flood watch through Memorial Day. EM Morning Brief is your concise daily update on national and state-by-state emergency management news. Produced by Sitch Radio, an EOC Voices podcast.
Key Takeaways
• CISA KEV expansion: Two new vulnerabilities added May 21, Langflow (CVE-2025-34291) and Trend Micro Apex One on-premise (CVE-2026-34926). Federal agencies and aligned operators should patch within the standard remediation window.
• CISA ICS Advisory: ICSA-26-141-01 published May 21, operational technology and industrial control system asset owners should review vendor mitigations.
• 2026 Atlantic hurricane outlook: Below-normal season projected by NOAA, with 8 to 14 named storms, 3 to 6 hurricanes, and 1 to 3 major. No tropical formation expected next seven days, but season begins June 1.
• Ebola Bundibugyo: CDC HAN-00530 and Worldwide Caution travel guidance remain in effect, with funneled entry for returning travelers from DRC, Uganda, South Sudan through Dulles.
• California Sandy Fire: About 2,115 acres, containment building from 22 to 30 percent, more than 17,000 still under evacuation orders with downgrades in progress.
• Colorado and Oklahoma Sharpe Fire: 29,209 combined acres, 80 percent contained, Colorado portion fully contained as of May 20.
• Colorado tornado warnings and Denver ground stop: NWS-issued tornado warnings for Logan and Kit Carson Counties May 21 evening, with an FAA ground stop at DIA for high winds ahead of holiday travel.
• New Mexico Seven Cabins Fire: 16,703 acres, 6 percent contained, 834 personnel assigned in the Capitan Mountain Wilderness.
• Arizona fire restrictions: BLM and Arizona State Forestry implement seasonal restrictions effective May 21, 8 a.m.
• Texas flooding: Statewide flood watch across South Texas through May 25, Texas SEOC at Level II Escalated Response.
• NIFC year-to-date: Roughly 28,759 wildfires and 2.3 million acres burned, well above the ten-year average.
Sources
CISA
• CISA Adds Two Known Exploited Vulnerabilities to Catalog — May 21, 2026 KEV update
• Known Exploited Vulnerabilities Catalog — current list
• ICS Advisories — index including ICSA-26-141-01
NOAA / NHC
• NOAA predicts below-normal 2026 Atlantic hurricane season — May 21 announcement
• Graphical Tropical Weather Outlook — National Hurricane Center
CDC / HHS / State Department
• Ebola Disease Outbreak in the Democratic Republic of the Congo and Uganda — HAN-00530
• CDC Mobilizes International Response Following Ebola Disease Outbreak in DRC and Uganda
• Travel Advisories — Travel.State.gov
• Worldwide Caution — U.S. Department of State
NIFC / InciWeb
• Incident Management Situation Report — Thursday, May 21, 2026, 0730 MDT
• InciWeb — Incident Information System
Arizona
• BLM Arizona — Dry conditions trigger fire restrictions in central and western Arizona
California
• Sandy Fire — Simi Valley, Ventura County Emergency
• Sandy Fire reaches 2,100 acres with 22% containment, evacuation orders remain — CBS Los Angeles
• Containment grows on California wildfire that forced thousands to evacuate — Insurance Journal
Colorado
• Sharpe Fire — Baca County, Colorado portion 100% contained, KRDO
• Sharpe Fire combined acreage and 80% containment update — News Channel 10
• A flash drought in southeastern Colorado primed plains for the Sharpe fire — Colorado Sun
• FAA orders ground stop for Denver International Airport — KRDO
• Active Alerts — NWS Denver / Goodland tornado warnings May 21
New Mexico
• NM Fire Info — Seven Cabins Fire Daily Update, May 20, 2026
• New Fire Start on Magdalena Ranger District — Mill Fire
Oklahoma
• Sharpe Fire in Oklahoma, Colorado burns over 29,000 acres, 80% contained — News Channel 10
Texas
• Thursday, May 21, 2026: Flood watch issued for all of South Texas — KRGV
• Texas Division of Emergency Management — Press Releases
• Texas flood threat: Days of heavy rain slam South through Memorial Day — Fox Weather
FAA
Transcript
Good morning.
Speaker A: ,: Speaker A: low origin validation flaw CVE: Speaker A: control Systems Advisory ICA: Speaker A:Operators across critical infrastructure should pull both items into patch cycles and check exposure on edge AI tooling and endpoint security platforms.
Speaker A: ncement Thursday to issue the: Speaker A:The National Hurricane center reports no tropical cyclone formation expected over the next seven days in the Atlantic, Caribbean, Gulf or eastern and central Pacific.
Speaker A:Season officially begins June 1 and planners should still close out pre season logistics.
Speaker A:The Ebola Bundabugyo outbreak in the Democratic Republic of the Congo and Uganda remains a public health emergency of international concern.
Speaker A: lth Alert Network Advisory HAN: Speaker A:The State Department continues to direct returning travelers from DRC, Uganda or South Sudan within 21 days of U.S. arrival to enter only through Washington Dulles International.
Speaker A:NIFC's May 21 Incident Management Situation Report puts year to date wildfire activity at roughly 28,759 fires and about 2.3 million acres burned, well above the 10 year average with 19 incidents and 4 new large fires reported on the day.
Speaker A:Let's run through the States, the Arizona Department of Forestry and Fire Management and the Bureau of Land Management implemented seasonal fire restrictions across central and western Arizona effective Thursday at 8am Fire managers cite an early uptick in wildfire activity and a forecast of hotter, drier conditions in coming weeks.
Speaker A:Restrictions limit campfires, smoking outside enclosed structures and operation of equipment that can generate sparks across BLM and state administered lands.
Speaker A:The Sandy fire in Simi Valley sits at approximately 2,115 acres with containment progressing through the day on May 21 from 22% toward 30%.
Speaker A:More than 17,000 residents remained under evacuation orders into Thursday afternoon, with Ventura County Emergency Management beginning to downgrade some zones to warnings as conditions allowed.
Speaker A:Investigators tie ignition to a tractor strike on a rock during brush clearance near Rudolph Drive off the coast.
Speaker A:The Santa Rosa island fire stands at 17,554 acres and 44% contained.
Speaker A:Colorado Governor Jared Polis earlier disaster declaration for the Sharp Fire remains active.
Speaker A:The fire ignited by lightning in Cimarron County, Oklahoma and pushed north into Baca County, Colorado has burned a combined 29,209 acres across the two states and reached 80% containment overall, with the Colorado portion fully contained as of May 20.
Speaker A:Separately, the National Weather Service offices in Denver and Goodland issued multiple tornado warnings on the evening of May 21 for storms tracking across northeastern Colorado, including Logan and Kit Carson counties with reports of large hail.
Speaker A:The FAA briefly ordered a ground stop at Denver International Airport ahead of Memorial Day weekend operations because of high wind.
Speaker A:New Mexico the seven Cabins fire in the Capitan Mountain Wilderness grew to roughly 16,703 acres at at 6% containment as of May 21 with 834 personnel assigned, 34 crews, 39 engines, 8 helicopters, 31 water tenders and 7 dozers.
Speaker A:The fire is human caused and burning in heavy dead fuels.
Speaker A:Within the Pepin Burn Scar, crews are using direct extinguishment with handline construction supported by aerial water drops.
Speaker A:On the Magdalena Ranger District, the Millfire start at about 6 acres, saw aggressive initial attack on May 21st with forward progress stopped.
Speaker A:Oklahoma the Sharp Fire continues to burn in Samarin County, Oklahoma as the most active portion of the combined Sharp footprint with overall containment at 80%.
Speaker A:Crews are working, mop up and patrolling for spotting in the Burn Scar area.
Speaker A:The National Weather Service expanded a flood watch to cover all of south Texas through 7am Monday, May 25, with several locations already reporting 3 to 6 inches of rainfall and additional rounds expected through Memorial Day weekend.
Speaker A:Southeast Texas saw 6 to 9 inches in some locations over a 12 hour window earlier in the week.
Speaker A:The Texas State Emergency Operations center is operating at level two escalated response with 24 hour emergency management Council coordination supporting local requests for state assistance.
Speaker A:All other states and territories have no significant updates in the last 24 hours that wraps today's EM Morning Brief.
Speaker A:New episodes drop Monday through Friday in the 5am hour PT so the day starts with clarity instead of catch up.
Speaker A:Subscribe on the Emergency Management Network on Substack or follow on your favorite podcast player.
Speaker A:EM Morning Brief is an EOC Voices podcast.
Speaker A:Stay safe.
