Security2 hOctober 15, 2026, 17:43

CISA adds four exploited flaws in Palo Alto, Cisco and Ahsay to KEV catalog

CISA added four vulnerabilities to its Known Exploited Vulnerabilities catalog: an RCE in PAN-OS (CVSS 8.6), a path traversal in Cisco Secure Email Gateway (9.8), and two AhsayCBS flaws chained for SYSTEM access. US federal agencies have until October 17, 2026 to patch.

Help Net Security

Open source

CISA adds four exploited flaws in Palo Alto, Cisco and Ahsay to KEV catalog

CVE-2026-0322 in PAN-OS allows root code execution on PA-Series, VM-Series and Panorama, CVSS 8.6
CVE-2026-76519 in Cisco SEG: CVSS 9.8, requires Content Scanner Tools 25.3.0.5525+
AhsayCBS: earlier patches v9.15.2.59 and v10.3.4.0 left CVE-2026-105133 and CVE-2026-105134 unfixed
US federal agencies must remediate by October 17, 2026

#CISA#PaloAltoNetworks#Cisco#Ahsay

Palo Alto Networks warns of exploited PAN-OS RCE flaw

Security

Palo Alto report: 68% of critical infrastructure firms lack OT asset visibility

Security

Palo Alto VPN flaw CVE-2026-0257 still exploited by Qilin and Settra

Security

CISA adds four exploited flaws in Palo Alto, Cisco and Ahsay to KEV catalog

Palo Alto Networks warns of exploited PAN-OS RCE flaw

Palo Alto report: 68% of critical infrastructure firms lack OT asset visibility

Palo Alto VPN flaw CVE-2026-0257 still exploited by Qilin and Settra

Palo Alto Networks: 52% of critical infrastructure operators can't see legacy OT