CISA sets three-day deadline for exploited PAN-OS, Cisco and Ahsay flaws

Feeds.4Sysops •IT News • October 15, 2026

CISA has added four actively exploited vulnerabilities in Palo Alto Networks PAN-OS, Cisco Secure Email Gateway and AhsayCBS to its Known Exploited Vulnerabilities catalog. U.S. federal civilian agencies have until October 17 to fix them. Ahsay customers should take particular care: earlier patches did not fully close two flaws now being used to deploy webshells and cryptominers. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Adds Critical Vulnerabilities in PAN-OS, Cisco, and Ahsay to KEV Catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in Palo Alto Networks PAN-OS, Cisco Secure Email Gateway, and AhsayCBS. The vulnerabilities are CVE-2026-0322 (high-severity code injection), CVE-2026-76519 (critical relative path traversal), CVE-2026-105133 (improper authentication), and CVE-2026-105134 (critical command injection). Active exploitation has been confirmed for these vulnerabilities, particularly CVE-2026-76519 and CVE-2026-105134, which have been used to deploy web shells and cryptocurrency miners. Ahsay customers are specifically advised to address these vulnerabilities due to previous patches failing to fully mitigate the issues. Federal agencies have until October 17, 2026, to remediate these vulnerabilities. The vulnerabilities were added to the KEV catalog on October 14, 2026, based on evidence of active exploitation. 3 sources 73

Extracted Entities

CISA sets three-day deadline for exploited PAN-OS, Cisco and Ahsay flaws

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (3)