CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA reports active exploitation of multiple vulnerabilities added to or highlighted in its Known Exploited Vulnerabilities (KEV) Catalog during October 2026. Affected products include Palo Alto PAN-OS, Cisco Secure Email Gateway and Catalyst SD-WAN Manager, AhsayCBS, Ivanti Connect Secure, Microsoft Windows, Citrix NetScaler, Zammad, Fortinet FortiMail, and related enterprise systems. The Ivanti Connect Secure zero-day enables remote unauthenticated arbitrary command execution and has been used for credential theft and data exfiltration; CISA warns that memory-based exploitation may evade the