CISA adds Eight Vulnerabilities to KEV; FEMA Montana, Idaho, Oregon Disaster Declarations Published

On today’s EM Morning Brief, CISA adds eight actively exploited vulnerabilities to the Known Exploited Vulnerabilities Catalog with a May 11 federal remediation deadline. FEMA major disaster declarations for Montana, Idaho, and Oregon tied to December 2025 storms were published in the Federal Register, opening Public Assistance funding. Super Typhoon Sinlaku recovery continues across Guam and the CNMI under active federal emergency and public-health emergency determinations. Red Flag Warnings span the Plains, Southwest, and High Plains with critical fire weather peaking midweek, and the Hawaiian Volcano Observatory revises its Kilauea Episode 45 forecast window to April 21 through 26. State updates cover Texas flash flooding, Wisconsin tornado recovery, Oklahoma wildfire containment, and the ongoing response to the Minidoka Memorial Hospital cyber incident in Idaho. EM Morning Brief is your concise daily update on national and state-by-state emergency management news. Produced by Sitch Radio, an EOC Voices podcast.Key Takeaways• CISA KEV update: Eight new actively exploited CVEs added April 20 (PaperCut, JetBrains TeamCity, Kentico, Quest KACE, Zimbra, three Cisco SD-WAN Manager). Federal patch deadline May 11.• FEMA declarations published: Major Disaster Declarations for Montana (DR-4901), Idaho (DR-4905), and Oregon formally appear in the Federal Register, opening Public Assistance for December 2025 storm damage.• Sinlaku recovery: Federal emergency declarations and HHS public-health emergency remain in effect for Guam and the CNMI. Power and water restoration on Saipan, Tinian, and Rota may take weeks.• Kilauea Episode 45: HVO revises the lava-fountaining forecast window to Tuesday, April 21 through Sunday, April 26. Summit remains paused but inflating.• Fire weather: Red Flag Warnings active across Colorado, Kansas, Nebraska, New Mexico, Oklahoma, South Dakota, and Wyoming. Wednesday expected to be most dangerous day of the week.• Texas flash flooding: Flash Flood Warning along San Antonio to New Braunfels corridor; SAFD reports nine water rescues. Houston metro sees localized urban flooding with rainfall rates up to three inches per hour.• Wisconsin storm response: SEOC Update 4 reports 28 resource requests and continued coordination with county and tribal emergency managers following confirmed April 14 tornadoes and flood damage.• Idaho hospital cyber incident: Minidoka Memorial Hospital restores imaging services April 19. Blackwater ransomware group claims April 17 and threatens data publication after April 24.• April 17 tornado cleanup: NWS confirms a high-end EF-2 in Lena, Illinois; EF-1 tornadoes in Jo Daviess County, Illinois and Washington County, Iowa; and an EF-2 in Rochester, Minnesota with two injuries.SponsorsThe NIMS Store - https://thenimsstore.com/SourcesCISA• CISA Alert — Eight new KEV entries (April 20, 2026) — PaperCut, JetBrains TeamCity, Kentico Xperience, Quest KACE SMA, Zimbra, and three Cisco Catalyst SD-WAN Manager CVEs; federal patch deadline May 11, 2026• CISA — Known Exploited Vulnerabilities Catalog — Authoritative catalog of actively exploited CVEsFEMA• Federal Register — Montana Major Disaster Declaration (DR-4901-DR) — Public Assistance Only for December 9-11, 2025 severe storms and flooding• Federal Register — Idaho Major Disaster Declaration (DR-4905-DR) — Public Assistance Only for December 16-18, 2025 straight-line winds• Federal Register — Oregon Major Disaster Declaration — Public Assistance Only for December 15-21, 2025 storms and landslides• FEMA — DR-4901-MT page — Montana disaster assistance details and deadlines• FEMA — Emergency Declaration for Guam — April 17, 2026 press release on Super Typhoon Sinlaku supportNIFC and wildland fire• NIFC — National Fire News — April 20, 2026 daily national fire activity summary• NICC — Incident Management Situation Report — Daily SITREP from the National Interagency Coordination Center• InciWeb — Incident Information System — Active wildland-fire and incident recordsUSGS and volcano• USGS — Kīlauea Volcano Updates — HVO summit eruption status and Episode 45 forecast window• HVO Volcano Notice — April 19, 2026 — Revised Episode 45 timing: April 21 to April 26 window• USGS — Significant Earthquakes 2026 — Catalog of significant events including the April 20 M7.4 near Miyako, JapanNOAA/NWS• NOAA Storm Prediction Center — Day 1 Convective Outlook — National severe-weather risk areas• NOAA SPC — Fire Weather Outlook — Red Flag / critical fire-weather areasHHS/CDC• HHS ASPR — Public Health Emergency: CNMI and Guam / Typhoon Sinlaku — April 17, 2026 determination by the Secretary• CDC HAN — Medetomidine Advisory — Prior HAN on illicit-drug-supply risk (context)DHS• DHS — National Terrorism Advisory System — NTAS bulletin page (no new bulletin in the last 24 hours)FAA• FAA — Daily Air Traffic Report — Weather-related delays and advisories• FAA — National Airspace System Status — Real-time airport and NAS statusAlabama• NWS Birmingham — Regional fire-weather and forecastAlaska• Alaska Earthquake Center — Adak M4.7 — April 20, 2026 Aleutian event, no tsunamiArizona• NWS SPC — Fire Weather Outlook — Red Flag conditions across the SouthwestArkansas• Arkansas Division of Emergency Management — State-level EM updatesCalifornia• Cal Fire — Incidents — Active incident list and evacuation informationColorado• BoulderCAST — This Week in Colorado Weather (April 20, 2026) — Red Flag timing and wind outlookFlorida• Florida State Watch Office — Florida Division of Emergency Management situation reports• NWS Miami — Hazardous Weather Outlook — South Florida severe and marine hazardsHawaii• Hawai‘i County — Emergency...