CISA Adds One Known Exploited Vulnerability to Catalog
2026-10-23T21:24:03Z•481986b1db5660310ab9e77a59de5c249c8e1302e6ad353a63ad4f08a1a296f5
CVE-2025-61624CVE-2026-102764CVE-2026-106931CVE-2026-109618CVE-2026-109619CVE-2026-110447CVE-2026-110936CVE-2026-114625CVE-2026-21589CVE-2026-96652CVE-2026-96654CVE-2026-96655CVE-2026-96656AtlassianBeyondTrustCISACollabora OnlineFortinetKEVPHPPlex Media ServerSQL injectionSSRFSiemensVeloCloudactively exploitedauthentication bypasscommand injectionpath traversalremote code executionvulnerability management
What happened
CISA alerts report multiple vulnerabilities actively exploited in the wild and added to the Known Exploited Vulnerabilities catalog, including command injection, SQL injection, SSRF, path traversal, authentication bypass, file exposure, and insecure search-path flaws affecting Collabora Online, Arista VeloCloud Orchestrator, Plex Media Server, EG Secure Solutions SiteGuard, Siemens Software Center, Fortinet products, BeyondTrust Remote Support, and Atlassian products. CISA also warns of critical unauthenticated remote code execution vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619),
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- 481986b1db5660310ab9e77a59de5c249c8e1302e6ad353a63ad4f08a1a296f5
- Enrichment time
- 2026-10-23T21:24:03Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.