CISA Adds Two Known Exploited Vulnerabilities to Catalog
Summary
CISA has added two new vulnerabilities, CVE-2025-61624 and CVE-2026-102764, to its Known Exploited Vulnerabilities (KEV) Catalog due to evidence of active exploitation. These vulnerabilities affect Fortinet products (path traversal) and BeyondTrust Remote Support (authentication bypass).
IFF Assessment
The addition of known exploited vulnerabilities to CISA's catalog indicates active threats that organizations must prioritize for remediation, posing a risk to defenders.
Severity
CISA KEV: Listed as actively exploited. Federal patch due: October 19, 2026. Known ransomware use: Unknown.
Defender Context
Defenders should pay close attention to CISA's KEV Catalog updates, as these entries represent vulnerabilities that are actively being exploited in the wild. Prioritizing patching for these identified vulnerabilities is crucial for mitigating immediate risks to their infrastructure.