CISA Adds Six Known Exploited Vulnerabilities to Catalog
2026-10-20T21:24:03Z•677a4fc7baf1fd049e141d78596a626812106fc33bb026fba5a071a058c69e8f
CVE-2025-61624CVE-2026-0322CVE-2026-102764CVE-2026-104935CVE-2026-105133CVE-2026-105134CVE-2026-106931CVE-2026-110936CVE-2026-21589CVE-2026-76519CVE-2026-96652CVE-2026-96654CVE-2026-96655CVE-2026-96656CVE-2026-96951CISA KEVactively exploitedauthentication bypasscommand injectionnetwork appliancespatchingpath traversalremote access softwareremote code executionserver-side request forgeryvulnerability managementzero-day
What happened
CISA advisories from October 2026 report active exploitation of multiple vulnerabilities added to the Known Exploited Vulnerabilities catalog. Affected products include Plex Media Server, EG Secure Solutions SiteGuard, Siemens Software Center, BeyondTrust Remote Support, Fortinet products, Atlassian products, Palo Alto PAN-OS, Cisco Secure Email Gateway, AhsayCBS, Ivanti Connect Secure, and Microsoft Windows. The most urgent issues include authentication bypass and remote unauthenticated command execution in Ivanti Connect Secure, authentication bypass in BeyondTrust Remote Support, command-in
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- 677a4fc7baf1fd049e141d78596a626812106fc33bb026fba5a071a058c69e8f
- Enrichment time
- 2026-10-20T21:24:03Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.