Back Ground.News

CISA Adds Four Known Exploited Vulnerabilities to Catalog

Ground.News • October 15, 2026

The US Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-0322, a high-severity remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS CVE-2026-76519, a critical relative path traversal vulnerability in Cisco Secure Email Gateway (SEG) CVE-2026-105133, a medium-severity improper authentication vulnera…

U.S. CISA adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog

CISA Adds Four Known Exploited Vulnerabilities to Catalog ggaylor Oct 14, 2026 Release DateOctober 14, 2026 DescriptionCISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal VulnerabilityCVE-2026-105133 Ahsay AhsayCBS Improper Auth…

There is no tracked Bias information for the sources covering this story.

To view factuality data please Upgrade to Premium

To view ownership data please Upgrade to Vantage

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Adds Critical Vulnerabilities in PAN-OS, Cisco, and Ahsay to KEV Catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in Palo Alto Networks PAN-OS, Cisco Secure Email Gateway, and AhsayCBS. The vulnerabilities are CVE-2026-0322 (high-severity code injection), CVE-2026-76519 (critical relative path traversal), CVE-2026-105133 (improper authentication), and CVE-2026-105134 (critical command injection). Active exploitation has been confirmed for these vulnerabilities, particularly CVE-2026-76519 and CVE-2026-105134, which have been used to deploy web shells and cryptocurrency miners. Ahsay customers are specifically advised to address these vulnerabilities due to previous patches failing to fully mitigate the issues. Federal agencies have until October 17, 2026, to remediate these vulnerabilities. The vulnerabilities were added to the KEV catalog on October 14, 2026, based on evidence of active exploitation. 3 sources 73

Extracted Entities

CVEs (3)

CVE-2026-0322 CVE-2026-105133 CVE-2026-76519

Platforms (4)

AhsayCBS Cisco Secure Email Gateway Microsoft Windows Palo Alto Networks Pan-os