New Vulnerabilities Added to CISA's KEV Catalog
Article Content
Browse articles 
- •CISA added CVE-2026-104935 and CVE-2026-96951 to the KEV Catalog on October 13, 2026.
- •Both vulnerabilities require forensic triage as per BOD 26-04.
- •No current evidence links these vulnerabilities to ransomware campaigns.
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog on October 13, 2026. The vulnerabilities are CVE-2026-104935 and CVE-2026-96951, both of which are currently unknown to be used in ransomware campaigns. Forensic triage is required for both vulnerabilities as per BOD 26-04. The specific systems affected and the details regarding their exploitation remain unclear. Security professionals are encouraged to monitor these vulnerabilities closely and report any additional actively exploited vulnerabilities to CISA. Both vulnerabilities were disclosed on the same day and are now part of the KEV Catalog.
Ask AI about this cluster
Answers cite the sources they use
Updated 1h ago How this analysis works
Timeline
2026-10-13
CVE-2026-104935 added to KEV Catalog
CISA added CVE-2026-104935 to its Known Exploited Vulnerabilities Catalog, requiring forensic triage.
Article 12026-10-13
CVE-2026-96951 added to KEV Catalog
CISA added CVE-2026-96951 to its Known Exploited Vulnerabilities Catalog, requiring forensic triage.
Article 2More articles in this cluster (2)
Common questions
What are the new CVEs added to the KEV Catalog?
The new CVEs added are CVE-2026-104935 and CVE-2026-96951.
What is the current status of these vulnerabilities?
Both vulnerabilities are listed in the KEV Catalog, but there is no confirmed exploitation reported.
What actions should I take regarding these vulnerabilities?
Monitor the vulnerabilities closely and report any actively exploited instances to CISA.
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active… 
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…