CISA flags Cisco SD-WAN bypass in KEV; Plains fire weather and Oakland County water emergency continue

CISA adds a Cisco Catalyst SD-WAN Controller authentication bypass (CVE-2026-20182) to its Known Exploited Vulnerabilities catalog, layering on Emergency Directive 26-03. The USGS Hawaiian Volcano Observatory reports the close of Kilauea’s nine-hour episode 47 at Halemaumau, with alert level remaining at WATCH. NIFC holds the country at Preparedness Level 2 as Red Flag Warnings stretch from western Minnesota through the Dakotas and into Nebraska. FEMA announces more than $1.2 billion in Southeast recovery funding for seven states, and Michigan’s Oakland County water emergency and Newaygo County’s Hesperia Dam flood watch continue. EM Morning Brief is your concise daily update on national and state-by-state emergency management news. Produced by Sitch Radio, an EOC Voices podcast.Key Takeaways• Cyber: CISA adds CVE-2026-20182 (Cisco Catalyst SD-WAN Controller authentication bypass) to the KEV catalog, reinforcing Emergency Directive 26-03 obligations for federal civilian agencies and signaling active exploitation operators must address now.• Volcano: Kilauea episode 47 ended at 12:27 a.m. HST on May 15 after about nine hours of fountaining; alert level remains WATCH, aviation code Orange, and vog and light tephra are possible downwind.• Wildfire weather: Red Flag Warnings cover western Minnesota, most of North and South Dakota, northwest Iowa, and western and north-central Nebraska, with gusts to 55 mph and humidity in the teens.• Wildfire incidents: Arizona’s Jones Fire holds at 84 acres and 66 percent containment near Wickenburg; California’s Rowlee Fire near the Kern-Tulare county line forces evacuation orders for the 2902-Rowlee zone.• FEMA recovery: More than $1.2 billion in federal recovery funding is approved for seven Southeastern states for pandemic and Hurricane Helene work.• Lifelines: water: Oakland County, Michigan remains under a state of emergency tied to a 42-inch GLWA water main break, with boil-water advisories continuing in multiple communities; Newaygo and Oceana counties remain under a flash flood watch tied to the Hesperia Dam.• Lifelines: hazmat: Lexington, Kentucky cleared an Oliver Lewis Way hazmat incident after a pool-chemical tank valve failure; roadways have reopened.• Public health: CDC HAN-528 on an imported Andes hantavirus cluster remains the most recent national HAN advisory; U.S. risk is assessed as extremely low.• Tropical outlook: NHC resumes routine Atlantic and East Pacific Tropical Weather Outlooks; no tropical cyclones in either basin.• BLM restrictions: Seasonal fire restrictions take effect on BLM-administered lands across Oregon and Washington.SponsorsThe NIMS Store - https://thenimsstore.com/SourcesNIFC and Wildland Fire• NIFC Incident Management Situation Report (May 14, 2026) — PL2, 31 active large incidents, 1,683 personnel, YTD acres.• NIFC National Fire News — Current national fire activity and IMSR archive.CISA• CISA Adds One Known Exploited Vulnerability to Catalog (May 14, 2026) — CVE-2026-20182 Cisco Catalyst SD-WAN Controller authentication bypass added to KEV.• ED 26-03: Mitigate Vulnerabilities in Cisco SD-WAN Systems — Federal civilian agency requirements for Cisco Catalyst SD-WAN Manager and Controller.• CISA Known Exploited Vulnerabilities Catalog — Living KEV list and update notices.FEMA• FEMA Approves More Than $1.2 Billion to Support Recovery in Seven Southeastern States (May 14, 2026) — FL, GA, KY, MS, NC, SC, TN; pandemic and Helene recovery funding.• FEMA Disasters and Declarations — Searchable index of federal declarations and assistance actions.USGS and Volcanoes• Kilauea Volcano Updates (Hawaiian Volcano Observatory) — Episode 47 timeline and alert-level status.• USGS Volcano Notice DOI-USGS-HVO-2026-05-14 — Active notice for Kilauea summit eruption.NHC and Tropical Outlooks• NHC Atlantic Graphical Tropical Weather Outlook — Routine Atlantic outlooks resume May 15.• NHC Eastern North Pacific Graphical Tropical Weather Outlook — Routine East Pacific outlooks resume May 15.CDC and Public Health• HAN 528: 2026 Multi-country Hantavirus Cluster Linked to Cruise Ship — Most recent CDC HAN advisory; U.S. risk assessed extremely low.State Department• Travel Advisories — Current Level 1 through Level 4 country advisories and updates.Severe Weather• Storm Prediction Center Day 1 Convective Outlook — Current SPC convective and fire-weather outlook products.Arizona• Jones Fire 66 percent contained (KTAR, May 14, 2026) — Footprint holds at 84 acres; containment updated to 66 percent.• US 60 partially reopens; evacuation order lifted — ADOT and Wickenburg fire updates.California• Rowlee Fire evacuation order, Kern-Tulare county line (KGET, May 14, 2026) — Kern County Fire reports ~100 acres, evacuation order for 2902-Rowlee zone.• CAL FIRE Incidents — Statewide active incident dashboard.Hawaii• Kilauea Volcano Eruption Update (Big Island Video News, May 14, 2026) — Episode 47 fountaining duration and plume height.Illinois, Iowa, Wisconsin• Very Active Start to 2026 Severe Weather Season (NWS Chicago) — Regional context on severe-weather corridor.Kansas, Oklahoma, Texas• Tornado Outbreak Warning Issued to Millions in Central US (Newsweek, May 14, 2026) — Coverage of the multi-day Plains severe-weather threat.Kentucky• Large hazmat spill shuts down section of Oliver Lewis Way (WKYT, May 14, 2026) — Pool-chemical valve failure; LFD hazmat response.Michigan• Executive Order 2026-11 Declaration of State of Emergency — Governor Whitmer’s declaration for Oakland County water main break.• <a...