U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog
2026-09-24T02:51:36Z•eb9cb32287796c45ffdb8096c5f2130d3f8a5ab3d50c40e09bef67767fda1add
CVE-2026-7273CVE-2026-85102CVE-2026-87902CVE-2026-93616CVE-2026-94127Arista VeloCloud OrchestratorCISA KEVCheck Point Security Management ServerEDR tamperingF5 BIG-IP APMWordPressZyxel GS1900actively exploited vulnerabilitiesdata breachdevice-code phishinginfostealerphishing-as-a-serviceprivilege escalationpublic proof of conceptremote code executionzero-day
What happened
SecurityAffairs reports multiple high-impact cybersecurity developments, including CISA additions to its Known Exploited Vulnerabilities catalog for Check Point, Arista VeloCloud Orchestrator, F5 BIG-IP APM, and Zyxel flaws. F5 BIG-IP APM CVE-2026-94127 is described as a critical, actively exploited unauthenticated remote-code-execution zero-day. Other notable incidents include an alleged FBI breach by ShinyHunters, a law-enforcement takedown of the EvilTokens phishing-as-a-service platform, a fake LastPass GitHub campaign deploying an infostealer and disabling security products, an activelyهx
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- eb9cb32287796c45ffdb8096c5f2130d3f8a5ab3d50c40e09bef67767fda1add
- Enrichment time
- 2026-09-24T02:51:36Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.