[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9yYfZhiVsbY2aXCMfMLUAOrIQ5zHJZFxvpPxUop95p8":3},{"article":4,"iocs":53,"watch_terms":67,"solutions":68,"lesson":138},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":35},"0319223e-cc81-4cfd-8873-475014163d9f","CISA Adds Four Known Exploited Vulnerabilities to Catalog","cisa-adds-four-known-exploited-vulnerabilities-to-catalog-616ea1","CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerability CVE-2026-105133 Ahsay AhsayCBS Improper Authentication Vulnerability CVE-2026-105134 Ahsay AhsayCBS Command Injection Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA’s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied. While BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria. Aware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA’s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.","CISA has updated its Known Exploited Vulnerabilities (KEV) Catalog with four new entries, including vulnerabilities in Palo Alto Networks PAN-OS, Cisco Secure Email Gateway, and Ahsay AhsayCBS. These additions highlight common attack vectors and underscore the importance of CISA's Binding Operational Directive (BOD) 26-04, which mandates federal agencies prioritize patching these high-risk vulnerabilities on public-facing assets.","CISA adds four actively exploited vulnerabilities to its KEV Catalog.","https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Falerts\u002F2026\u002F10\u002F14\u002Fcisa-adds-four-known-exploited-vulnerabilities-catalog",null,"2026-10-14T12:00:00+00:00","2026-10-14T22:00:05.702829+00:00",9,[17,20,23,25,27,29],{"name":18,"type":19},"CISA","vendor",{"name":21,"type":22},"PAN-OS","product",{"name":24,"type":19},"Palo Alto Networks",{"name":26,"type":22},"Secure Email Gateway",{"name":28,"type":19},"Cisco",{"name":30,"type":22},"AhsayCBS","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":12,"name":33,"slug":34},"Vulnerabilities","vulnerabilities",[36,41,43,48],{"category":37},{"id":38,"icon":12,"name":39,"slug":40},"217d3263-c763-41ca-875e-06901f522fe0","NIST","nist",{"category":42},{"id":31,"icon":12,"name":33,"slug":34},{"category":44},{"id":45,"icon":12,"name":46,"slug":47},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":49},{"id":50,"icon":12,"name":51,"slug":52},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[54,58,61,64],{"type":55,"value":56,"context":57},"cve","CVE-2026-0322","Palo Alto Networks PAN-OS Code Injection Vulnerability",{"type":55,"value":59,"context":60},"CVE-2026-76519","Cisco Secure Email Gateway Relative Path Traversal Vulnerability",{"type":55,"value":62,"context":63},"CVE-2026-105133","Ahsay AhsayCBS Improper Authentication Vulnerability",{"type":55,"value":65,"context":66},"CVE-2026-105134","Ahsay AhsayCBS Command Injection Vulnerability",[24,28,18],{"controls":69,"vendors":128},[70,99],{"slug":71,"name":72,"problem":73,"products":74},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[75,83,91],{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"slug":100,"name":101,"problem":102,"products":103},"patch-management","Automated patch management","Known holes get closed in days, not months.",[104,112,120],{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",[129,134],{"slug":130,"name":28,"logo_path":131,"roles":132},"cisco","\u002Fvendor-logos\u002Fcisco.png",[133],"affected",{"slug":135,"name":24,"logo_path":136,"roles":137},"palo-alto-networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png",[133],{"slug":139,"title":140,"body":141,"framework_refs":142,"framework_notes":154},"cisa-flags-four-actively-exploited-vulnerabilities-requiring-immediate-patching","CISA Flags Four Actively Exploited Vulnerabilities Requiring Immediate Patching","CISA's addition of four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog — affecting Palo Alto Networks PAN-OS, Cisco Secure Email Gateway, and Ahsay AhsayCBS — signals that threat actors are actively weaponizing these flaws in the wild. The core problem is that organizations, particularly those running public-facing infrastructure, are failing to apply patches before adversaries can exploit known weaknesses. This matters because network security appliances and email gateways are high-value targets that, once compromised, can provide attackers with broad access to internal systems. CISA's Binding Operational Directive (BOD) 26-04 mandates federal agencies remediate these vulnerabilities promptly, but the risk extends equally to private sector organizations that depend on the same products.",[143,144,145,146,147,148,149,150,151,152,153],"CIS Control 7: Continuous Vulnerability Management","CIS Control 2: Inventory and Control of Software Assets","CIS Control 12: Network Infrastructure Management","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 RA-5: Vulnerability Monitoring and Scanning","NIST SP 800-53 CM-8: System Component Inventory","CISA Binding Operational Directive (BOD) 26-04","CISA Known Exploited Vulnerabilities (KEV) Catalog","ITIL Service Transition: Change and Release Management","ISO\u002FIEC 27001:2022 Annex A 8.8: Management of Technical Vulnerabilities",{}]