NIST

BreakingPalo Alto Networks PAN-OS flaw CVE-2026-0322 is being actively exploited, CISA warns
CISA added the Palo Alto Networks PAN-OS vulnerability to its Known Exploited Vulnerabilities catalog on October 14, 2026, with a federal remediation deadline of October 17, 2026.

BreakingAhsay CBS flaw CVE-2026-105133 is being actively exploited, CISA warns
CISA added the Ahsay CBS vulnerability to its Known Exploited Vulnerabilities catalog on October 14, 2026, with a federal remediation deadline of October 17, 2026.

BreakingCisco Secure Email Gateway flaw CVE-2026-76519 is being actively exploited, CISA warns
CISA added the Cisco Secure Email Gateway vulnerability to its Known Exploited Vulnerabilities catalog on October 14, 2026, with a federal remediation deadline of October 17, 2026.

BreakingMicrosoft Windows flaw CVE-2026-96951 is being actively exploited, CISA warns
CISA added the Microsoft Windows vulnerability to its Known Exploited Vulnerabilities catalog on October 13, 2026, with a federal remediation deadline of October 16, 2026.

BreakingIvanti Connect Secure flaw CVE-2026-104935 is being actively exploited, CISA warns
CISA added the Ivanti Connect Secure vulnerability to its Known Exploited Vulnerabilities catalog on October 13, 2026, with a federal remediation deadline of October 16, 2026.

ProFTPD flaw CVE-2015-3306 is being actively exploited, CISA warns
CISA added the ProFTPD vulnerability to its Known Exploited Vulnerabilities catalog on October 8, 2026, with a federal remediation deadline of October 11, 2026.

Apache Struts flaw CVE-2016-3081 is being actively exploited, CISA warns
CISA added the Apache Struts vulnerability to its Known Exploited Vulnerabilities catalog on October 8, 2026, with a federal remediation deadline of October 11, 2026.

ISC BIND flaw CVE-2015-5477 is being actively exploited, CISA warns
CISA added the ISC BIND vulnerability to its Known Exploited Vulnerabilities catalog on October 8, 2026, with a federal remediation deadline of October 11, 2026.

BreakingONLYOFFICE Docs flaw CVE-2021-3199 is being actively exploited, CISA warns
CISA added the ONLYOFFICE Docs vulnerability to its Known Exploited Vulnerabilities catalog on October 8, 2026, with a federal remediation deadline of October 11, 2026.

BreakingStrapi flaw CVE-2023-22894 is being actively exploited, CISA warns
CISA added the Strapi vulnerability to its Known Exploited Vulnerabilities catalog on October 8, 2026, with a federal remediation deadline of October 11, 2026.