CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products
CISA added exploited Palo Alto, Cisco, and Ahsay flaws to KEV, with a three-day federal deadline.
CISA added four actively exploited vulnerabilities to the KEV catalog and gave U.S. federal civilian agencies until October 17, 2026, to remediate them. CVE-2026-0322 is an authenticated PAN-OS management-interface flaw, CVSS 8.6, that yields root code execution on PA-Series, VM-Series, and Panorama; Palo Alto reports very limited exploitation. CVE-2026-76519 is a CVSS 9.8 path-traversal bug in Cisco Secure Email Gateway’s AMP file-reputation feature that lets a crafted attachment write files and run commands as root. CVE-2026-105133 and CVE-2026-105134 in AhsayCBS are chained for authentication bypass and SYSTEM-level command injection; Huntress observed webshells and cryptominers, and Ahsay said earlier patches were incomplete.