CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA reports active exploitation of multiple vulnerabilities added to its Known Exploited Vulnerabilities (KEV) Catalog during October 2026. Affected products include Fortinet, BeyondTrust Remote Support, Atlassian, Palo Alto PAN-OS, Cisco Secure Email Gateway, AhsayCBS, Ivanti Connect Secure, Microsoft Windows, Citrix NetScaler, and Zammad. The most urgent item is CVE-2026-104935, an Ivanti Connect Secure zero-day authentication bypass enabling remote unauthenticated command execution, credential theft, and data exfiltration. Organizations should rapidly patch affected systems, prioritize any