CISA Adds Four Known Exploited Vulnerabilities to Catalog
Summary
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, citing evidence of active exploitation. These vulnerabilities include code injection and command injection flaws in Palo Alto Networks PAN-OS, Cisco Secure Email Gateway, and Ahsay AhsayCBS. The additions underscore the importance of CISA's Binding Operational Directive (BOD) 26-04, which mandates federal agencies prioritize the remediation of high-risk, exploited vulnerabilities.
IFF Assessment
The addition of new, actively exploited vulnerabilities to CISA's KEV catalog indicates increased threats and potential attack vectors that defenders must address.
Severity
CISA KEV: Listed as actively exploited. Federal patch due: October 17, 2026. Known ransomware use: Unknown.
Defender Context
Organizations, especially federal agencies, must prioritize patching these newly listed KEV vulnerabilities to mitigate active exploitation risks. Defenders should be aware that these flaws are already in the wild, meaning attackers may be actively leveraging them, and focus on timely remediation and monitoring for related suspicious activity.