CISA Adds Four Known Exploited Vulnerabilities to Catalog

As cited

Copy frozen at 2026-10-15 00:30 UTC (site build).

vulnerabilities

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA added four vulnerabilities to its Known Exploited Vulnerabilities Catalog based on active exploitation evidence: CVE-2026-0322 (Palo Alto Networks PAN-OS code injection), CVE-2026-76519 (Cisco Secure Email Gateway path traversal), CVE-2026-105133 (Ahsay AhsayCBS authentication), and CVE-2026-105134 (Ahsay AhsayCBS command injection). Binding Operational Directive 26-04 requires Federal Civilian Executive Branch agencies to prioritize rapid remediation of these high-risk, actively exploited vulnerabilities on publicly exposed systems. CISA encourages all organizations to adopt risk-based vulnerability management and remediate known exploited vulnerabilities as a priority.

Why it matters: Security teams must patch these four vulnerabilities immediately on internet-facing systems; federal agencies face mandatory remediation deadlines under BOD 26-04, and threat actors are actively exploiting them now.

Source published

2026-10-14 12:00 UTC

First seen by Cybersecurity Tracker

2026-10-14 23:14 UTC