CISA Adds One Known Exploited Vulnerability to Catalog
2026-10-24T01:24:00Z•97093e7a21bab57959b4347b2d87748eba7ee2a911021bd7b51da89545049583
CVE-2025-61624CVE-2026-102764CVE-2026-106931CVE-2026-109618CVE-2026-109619CVE-2026-110447CVE-2026-110936CVE-2026-114625CVE-2026-21589CVE-2026-96652CVE-2026-96654CVE-2026-96655CVE-2026-96656Arista VeloCloudAtlassianBeyondTrustCISACollabora OnlineFortinetKEVKnown Exploited VulnerabilitiesOS command injectionPHPPlex Media ServerSQL injectionSSRFSiemensactive exploitationauthentication bypasspath traversalremote code executionurgent patchingvulnerability management
What happened
CISA advisories from October 2026 identify multiple vulnerabilities under active exploitation and urge immediate remediation. Newly added KEV entries affect Collabora Online, Arista VeloCloud Orchestrator, Plex Media Server, EG Secure Solutions SiteGuard, Siemens Software Center, Fortinet products, BeyondTrust Remote Support, and Atlassian products. CISA also warns of critical unauthenticated remote-code-execution flaws in PHP (“php2shell”) and an actively exploited BeyondTrust Remote Support authentication bypass, recommending urgent patching, exposure reduction, and compromise assessment.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- 97093e7a21bab57959b4347b2d87748eba7ee2a911021bd7b51da89545049583
- Enrichment time
- 2026-10-24T01:24:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.