Tag
News and blog posts tagged CISA KEV on AppSecNews.
News Vulnerabilities & Zero-Days
Palo Alto Networks has patched CVE-2026-0322, a PAN-OS management interface flaw that lets an authenticated attacker run code as root, after observing very limited exploitation. CISA gave US federal agencies until 17 October 2026 to fix it.
Jaydeep Bhatt
News Vulnerabilities & Zero-Days
Microsoft's October 2026 updates fix more than 1,400 vulnerabilities, a record, including CVE-2026-96951, a Windows Shell flaw exploited in the wild that bypasses Mark of the Web protections. CISA gave US federal agencies until 16 October to patch it.
Jaydeep Bhatt
News Vulnerabilities & Zero-Days
Ivanti patched CVE-2026-104935 in Connect Secure on 13 October 2026 after limited exploitation in the wild, and CISA gave US federal agencies until 16 October to fix it. Volexity says an attacker chained it with a third, still unpatched flaw to run commands as root.
Jaydeep Bhatt