Known Exploited Vulnerabilities
Apache Struts flaw CVE-2016-3081 is being actively exploited, CISA warns
CISA added the Apache Struts vulnerability to its Known Exploited Vulnerabilities catalog on October 8, 2026, with a federal remediation deadline of October 11, 2026.
CISA
ISC BIND flaw CVE-2015-5477 is being actively exploited, CISA warns
CISA added the ISC BIND vulnerability to its Known Exploited Vulnerabilities catalog on October 8, 2026, with a federal remediation deadline of October 11, 2026.
CISA
BreakingONLYOFFICE Docs flaw CVE-2021-3199 is being actively exploited, CISA warns
CISA added the ONLYOFFICE Docs vulnerability to its Known Exploited Vulnerabilities catalog on October 8, 2026, with a federal remediation deadline of October 11, 2026.
CISA
BreakingStrapi flaw CVE-2023-22894 is being actively exploited, CISA warns
CISA added the Strapi vulnerability to its Known Exploited Vulnerabilities catalog on October 8, 2026, with a federal remediation deadline of October 11, 2026.
CISA
Top 10 vulnerabilities of the week (Sep 29–Oct 5, 2026): 6 actively exploited
This week's 10 most urgent vulnerabilities, including 6 CISA confirmed as actively exploited, ranked from CISA and NIST data.
CISA
BreakingCitrix NetScaler flaw CVE-2026-88779 is being actively exploited, CISA warns
CISA added the Citrix NetScaler vulnerability to its Known Exploited Vulnerabilities catalog on October 4, 2026, with a federal remediation deadline of October 7, 2026.
CISA
BreakingZammad GmbH Zammad flaw CVE-2026-102489 is being actively exploited, CISA warns
CISA added the Zammad GmbH Zammad vulnerability to its Known Exploited Vulnerabilities catalog on October 2, 2026, with a federal remediation deadline of October 5, 2026.
CISA
BreakingFortinet FortiMail flaw CVE-2026-104286 is being actively exploited, CISA warns
CISA added the Fortinet FortiMail vulnerability to its Known Exploited Vulnerabilities catalog on October 1, 2026, with a federal remediation deadline of October 4, 2026.
CISA
BreakingCisco Catalyst SD-WAN Manager flaw CVE-2026-76504 is being actively exploited, CISA warns
CISA added the Cisco Catalyst SD-WAN Manager vulnerability to its Known Exploited Vulnerabilities catalog on September 30, 2026, with a federal remediation deadline of October 3, 2026.
CISA
BreakingApple Multiple Products flaw CVE-2026-86950 is being actively exploited, CISA warns
CISA added the Apple Multiple Products vulnerability to its Known Exploited Vulnerabilities catalog on September 29, 2026, with a federal remediation deadline of October 2, 2026.
CISA