CISA expands KEV catalog and posts ICS advisory; NOAA issues below-normal 2026 Atlantic hurricane outlook

Friday’s brief covers two new CISA Known Exploited Vulnerabilities and a fresh Industrial Control Systems advisory, the NOAA 2026 Atlantic hurricane outlook issued from Lakeland, ongoing CDC Health Alert Network guidance on Ebola Bundibugyo, and material wildfire and severe-weather operations across Arizona, California, Colorado, New Mexico, Oklahoma, and Texas, including a Denver International ground stop and a statewide South Texas flood watch through Memorial Day. EM Morning Brief is your concise daily update on national and state-by-state emergency management news. Produced by Sitch Radio, an EOC Voices podcast.Key Takeaways• CISA KEV expansion: Two new vulnerabilities added May 21, Langflow (CVE-2025-34291) and Trend Micro Apex One on-premise (CVE-2026-34926). Federal agencies and aligned operators should patch within the standard remediation window.• CISA ICS Advisory: ICSA-26-141-01 published May 21, operational technology and industrial control system asset owners should review vendor mitigations.• 2026 Atlantic hurricane outlook: Below-normal season projected by NOAA, with 8 to 14 named storms, 3 to 6 hurricanes, and 1 to 3 major. No tropical formation expected next seven days, but season begins June 1.• Ebola Bundibugyo: CDC HAN-00530 and Worldwide Caution travel guidance remain in effect, with funneled entry for returning travelers from DRC, Uganda, South Sudan through Dulles.• California Sandy Fire: About 2,115 acres, containment building from 22 to 30 percent, more than 17,000 still under evacuation orders with downgrades in progress.• Colorado and Oklahoma Sharpe Fire: 29,209 combined acres, 80 percent contained, Colorado portion fully contained as of May 20.• Colorado tornado warnings and Denver ground stop: NWS-issued tornado warnings for Logan and Kit Carson Counties May 21 evening, with an FAA ground stop at DIA for high winds ahead of holiday travel.• New Mexico Seven Cabins Fire: 16,703 acres, 6 percent contained, 834 personnel assigned in the Capitan Mountain Wilderness.• Arizona fire restrictions: BLM and Arizona State Forestry implement seasonal restrictions effective May 21, 8 a.m.• Texas flooding: Statewide flood watch across South Texas through May 25, Texas SEOC at Level II Escalated Response.• NIFC year-to-date: Roughly 28,759 wildfires and 2.3 million acres burned, well above the ten-year average.SourcesCISA• CISA Adds Two Known Exploited Vulnerabilities to Catalog — May 21, 2026 KEV update• Known Exploited Vulnerabilities Catalog — current list• ICS Advisories — index including ICSA-26-141-01NOAA / NHC• NOAA predicts below-normal 2026 Atlantic hurricane season — May 21 announcement• Graphical Tropical Weather Outlook — National Hurricane CenterCDC / HHS / State Department• Ebola Disease Outbreak in the Democratic Republic of the Congo and Uganda — HAN-00530• CDC Mobilizes International Response Following Ebola Disease Outbreak in DRC and Uganda• Travel Advisories — Travel.State.gov• Worldwide Caution — U.S. Department of StateNIFC / InciWeb• Incident Management Situation Report — Thursday, May 21, 2026, 0730 MDT• National Fire News — NIFC• InciWeb — Incident Information SystemArizona• BLM Arizona — Dry conditions trigger fire restrictions in central and western ArizonaCalifornia• Sandy Fire — Simi Valley, Ventura County Emergency• Sandy Fire reaches 2,100 acres with 22% containment, evacuation orders remain — CBS Los Angeles• Containment grows on California wildfire that forced thousands to evacuate — Insurance JournalColorado• Sharpe Fire — Baca County, Colorado portion 100% contained, KRDO• Sharpe Fire combined acreage and 80% containment update — News Channel 10• A flash drought in southeastern Colorado primed plains for the Sharpe fire — Colorado Sun• FAA orders ground stop for Denver International Airport — KRDO• Active Alerts — NWS Denver / Goodland tornado warnings May 21New Mexico• NM Fire Info — Seven Cabins Fire Daily Update, May 20, 2026• New Fire Start on Magdalena Ranger District — Mill FireOklahoma• Sharpe Fire in Oklahoma, Colorado burns over 29,000 acres, 80% contained — News Channel 10Texas• Thursday, May 21, 2026: Flood watch issued for all of South Texas — KRGV• Texas Division of Emergency Management — Press Releases• Texas flood threat: Days of heavy rain slam South through Memorial Day — Fox WeatherFAA• Current Operations Plan Advisory — FAA ATCSCC• National Airspace System status