CISA Adds Two Known Exploited Vulnerabilities to Catalog
2026-10-27T21:24:03Z•7446aa3129fd31a0df9c44f3ede8e8fb8a2ead6d209c6ef55dc15b62f64e5a40
CVE-2026-102764CVE-2026-106931CVE-2026-109618CVE-2026-109619CVE-2026-110447CVE-2026-110936CVE-2026-111497CVE-2026-114625CVE-2026-48356CVE-2026-96652CVE-2026-96654CVE-2026-96655CVE-2026-96656Adobe CommerceBeyondTrust Remote SupportCISACollabora OnlineKEVKnown Exploited VulnerabilitiesMagentoOS command injectionPHPPlex Media ServerSQL injectionSSRFSiemens Software CenterVeloCloud Orchestratoractive exploitationauthentication bypasscritical vulnerabilitiesimmediate patchingremote code execution
What happened
CISA advisories from October 2026 report multiple vulnerabilities added to the Known Exploited Vulnerabilities (KEV) Catalog based on active exploitation. Affected products include Adobe Commerce/Magento, Google Brotli, PHP, Collabora Online, Arista VeloCloud Orchestrator, Plex Media Server, EG Secure Solutions SiteGuard, Siemens Software Center, and BeyondTrust Remote Support. The issues include unauthenticated remote code execution, OS command injection, SQL injection, authentication bypass, SSRF, file/path manipulation, memory corruption, and other flaws. CISA urges immediate patching, with
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- 7446aa3129fd31a0df9c44f3ede8e8fb8a2ead6d209c6ef55dc15b62f64e5a40
- Enrichment time
- 2026-10-27T21:24:03Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.