CISA Adds One Known Exploited Vulnerability to Catalog
2026-09-21T21:24:02Z•1568216a1e2cee0dae2982b7b0dbc193d2d92b588626a471d0d88e47b852149b
CVE-2025-39682CVE-2025-39964CVE-2026-53266CVE-2026-58704CVE-2026-7273CVE-2026-76460CVE-2026-76461CVE-2026-85706CVE-2026-87886Acronis BackupCISA KEVCiscoGitLabGoogle PixelLinux KernelSQL injectionZyxel GS1900active exploitationbuffer overflowimproper authorizationknown exploited vulnerabilitiesout-of-bounds writepath traversalprivilege escalationrace conditionvulnerability remediation
What happened
CISA alerts report the addition of actively exploited vulnerabilities to the Known Exploited Vulnerabilities (KEV) Catalog from September 14–21, 2026. Affected products include Zyxel GS1900 switches, Linux Kernel, Cisco Identity Services Engine, Acronis Backup, Google Pixel, Cisco Secure Email Gateway, and GitLab. Organizations should prioritize remediation, assess internet-exposed systems, and investigate potential compromise before patching.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- 1568216a1e2cee0dae2982b7b0dbc193d2d92b588626a471d0d88e47b852149b
- Enrichment time
- 2026-09-21T21:24:02Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.