CISA Adds Two Known Exploited Vulnerabilities to Catalog
2026-09-24T21:24:03Z•abd1e6bd9d49a65434f5a2760567a4aba749b896242ca472cd1650eef668c9ea
CVE-2025-39682CVE-2025-39964CVE-2026-53266CVE-2026-5430CVE-2026-58704CVE-2026-71362CVE-2026-7273CVE-2026-76460CVE-2026-85102CVE-2026-87886CVE-2026-93616CVE-2026-93952CVE-2026-94127Acronis BackupAdobe CommerceArista VeloCloudBOD 26-04CISA KEVCheck PointCisco ISEF5 BIG-IPGoogle PixelLinux KernelMagentoWSO2Zyxelactive exploitationsecurity patchingvulnerability management
What happened
CISA reported active exploitation and added 13 vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog between September 16 and 24, 2026. The affected products include WSO2, Adobe Commerce/Magento, Check Point, Arista VeloCloud Orchestrator, F5 BIG-IP, Zyxel switches, Linux Kernel, Cisco ISE, Acronis Backup, and Google Pixel. Organizations should prioritize remediation, assess internet-exposed assets, and investigate for compromise where patches were delayed.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- abd1e6bd9d49a65434f5a2760567a4aba749b896242ca472cd1650eef668c9ea
- Enrichment time
- 2026-09-24T21:24:03Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.