CISA adds the original ShellTool bugs (CVE-2025-49704 and CVE-2025-49706) to the KEV catalog