Known Exploited Vulnerabilities
BreakingFortinet Multiple Products flaw CVE-2025-61624 is being actively exploited, CISA warns
CISA added the Fortinet Multiple Products vulnerability to its Known Exploited Vulnerabilities catalog on October 16, 2026, with a federal remediation deadline of October 19, 2026.
CISA
BreakingBeyondTrust Remote Support flaw CVE-2026-102764 is being actively exploited, CISA warns
CISA added the BeyondTrust Remote Support vulnerability to its Known Exploited Vulnerabilities catalog on October 16, 2026, with a federal remediation deadline of October 19, 2026.
CISA
BreakingAtlassian Multiple Products flaw CVE-2026-21589 is being actively exploited, CISA warns
CISA added the Atlassian Multiple Products vulnerability to its Known Exploited Vulnerabilities catalog on October 15, 2026, with a federal remediation deadline of October 18, 2026.
CISA
BreakingPalo Alto Networks PAN-OS flaw CVE-2026-0322 is being actively exploited, CISA warns
CISA added the Palo Alto Networks PAN-OS vulnerability to its Known Exploited Vulnerabilities catalog on October 14, 2026, with a federal remediation deadline of October 17, 2026.
CISA
BreakingAhsay CBS flaw CVE-2026-105133 is being actively exploited, CISA warns
CISA added the Ahsay CBS vulnerability to its Known Exploited Vulnerabilities catalog on October 14, 2026, with a federal remediation deadline of October 17, 2026.
CISA
BreakingCisco Secure Email Gateway flaw CVE-2026-76519 is being actively exploited, CISA warns
CISA added the Cisco Secure Email Gateway vulnerability to its Known Exploited Vulnerabilities catalog on October 14, 2026, with a federal remediation deadline of October 17, 2026.
CISA
BreakingMicrosoft Windows flaw CVE-2026-96951 is being actively exploited, CISA warns
CISA added the Microsoft Windows vulnerability to its Known Exploited Vulnerabilities catalog on October 13, 2026, with a federal remediation deadline of October 16, 2026.
CISA
BreakingIvanti Connect Secure flaw CVE-2026-104935 is being actively exploited, CISA warns
CISA added the Ivanti Connect Secure vulnerability to its Known Exploited Vulnerabilities catalog on October 13, 2026, with a federal remediation deadline of October 16, 2026.
CISA
Top 10 vulnerabilities of the week (Oct 6–12, 2026): 5 actively exploited
This week's 10 most urgent vulnerabilities, including 5 CISA confirmed as actively exploited, ranked from CISA and NIST data.
CISA
ProFTPD flaw CVE-2015-3306 is being actively exploited, CISA warns
CISA added the ProFTPD vulnerability to its Known Exploited Vulnerabilities catalog on October 8, 2026, with a federal remediation deadline of October 11, 2026.
CISA