CISA Adds Fortinet CVE-2025-61624 to Actively Exploited Vulnerabilities List
CISA added CVE-2025-61624 in Fortinet products to the KEV catalog. The flaw allows a privileged account to write or delete arbitrary files.
Tag CISA
CVE-2026-102764 BeyondTrust: Critical Flaw Exploited as a Zero-Day
According to Mandiant, a critical vulnerability in BeyondTrust Remote Support was exploited before a fix was disclosed. Administrators of self-hosted appliances should deploy the update and check for possible signs of compromise.
Cisco Secure Email Gateway Patch Addresses Actively Exploited Vulnerability
Cisco released a patch for the critical CVE-2026-76519 vulnerability in Secure Email Gateway. After a crafted attachment is delivered, the flaw could allow remote command execution with root privileges.
Palo Alto Networks Fixes Actively Exploited PAN-OS Vulnerability
The CVE-2026-0322 vulnerability allows an authenticated attacker to execute code with root privileges on affected Palo Alto Networks firewalls.
CISA Adds CVE-2026-96951 in Windows Shell to Actively Exploited List
Microsoft released a fix for a Windows Shell vulnerability that attackers exploited before the update was disclosed. CISA subsequently added it to the Known Exploited Vulnerabilities catalog.
Ivanti fixes actively exploited vulnerability in Connect Secure
Ivanti released fixes for CVE-2026-104935 in Connect Secure after confirming limited exploitation. CISA added the vulnerability to its Known Exploited Vulnerabilities catalog.
CISA Adds CVE-2021-3199 in ONLYOFFICE Docs to Actively Exploited Vulnerabilities
CISA lists CVE-2021-3199 in ONLYOFFICE Docs as actively exploited. Administrators should update Document Server to at least version 5.6.3.
CISA Adds Old Apache Struts Vulnerability to Exploited Vulnerabilities Catalog
CISA added CVE-2016-3081 in Apache Struts to the KEV catalog. The flaw enables remote code execution when Dynamic Method Invocation is enabled.
U.S. Seizes Domains of Microscan and FishHub Tools Linked to Flax Typhoon
The U.S. Department of Justice and FBI, acting under court authorization, seized seven domains used by the Microscan and FishHub tools. According to officials, they were used to scan for vulnerabilities, conduct spear-phishing and gain subsequent access to networks.
Honeypots Detect 126 Attempts to Exploit Critical Atlassian Flaw
Previdian telemetry recorded 126 attempts to exploit the critical CVE-2026-21589 vulnerability in self-managed Atlassian Data Center products.