CISA adds Cisco BroadWorks XXE flaw to KEV (CVE-2026-20320)
An unauthenticated remote attacker can read sensitive configuration; the federal remediation due date is November 24.
Stories per day · 30 days
2 RSS
Relatedcisa-kev8kev6cisa5barracuda2linux-kernel2aspera1authentication-bypass1broadworks1cisco1code-execution1code-injection1command-injection1compliance1connect-secure1dll-hijacking1email-security1esg1esp1
27 stories, newest first · one card per story
Stories tagged #bod-26-04
CISA lists Barracuda ESG auth bypass in KEV (CVE-2026-116606)
An unauthenticated attacker can restore a crafted backup and change global configuration; the due date is November 13.
1
CISA adds SignalWire FreeSwitch code injection to KEV (CVE-2026-116779)
The flaw can expose configuration and credentials, control calls, and execute commands; action is due November 12.
CISA adds IBM Aspera Faspex flaw to KEV (CVE-2026-123218)
An authenticated user can craft a message to bypass authorization and escalate privileges; action is due November 12.
CISA BOD 26-04 tells agencies to prioritize patches by risk
Timelines depend on internet access, known exploitation, whether exploitation can be automated, and attacker control.
CISA adds Openwave Webtop Media Transcoder flaw to KEV (CVE-2026-111793)
An authenticated user who bypasses Webmail can process unintended document types; federal due date is November 24.
CISA adds GPUStack improper authentication flaw to KEV (CVE-2026-102895)
Unauthenticated callers can change users and models, create admin API keys, read secrets, and execute code.
CISA issues BOD 26-04 on security update prioritization
CISA BOD 26-04 requires federal agencies to remediate actively exploited vulnerabilities granting full control in three days with mandatory forensic triage.
CISA adds two exploited Ivanti Connect Secure flaws to KEV
CVE-2026-111357 and CVE-2026-118527 were added after evidence of active exploitation; FCEB agencies must prioritize them under BOD 26-04.
1
CISA adds exploited GitLab integer overflow CVE-2026-97229 to KEV
FCEB agencies must prioritize the GitLab flaw on exposed assets and check for compromise before patching.
CISA adds VMware ESX and Linux kernel flaws to KEV
CVE-2026-41709 and CVE-2026-46300 are actively exploited; BOD 26-04 requires FCEB agencies to prioritize them.
CISA KEV: Linux kernel CVE-2026-46300 due October 31
The flaw can alter page-cache data and, chained with two other CVEs, implant PHP webshells that run as root.
7
CISA lists Siemens Software Center DLL path flaw as exploited
Authenticated local attackers can plant a DLL for code execution; the federal action due date is November 3, 2026.
2
CISA lists exploited Plex Media Server SSRF (CVE-2026-96655)
Authenticated users on builds before 1.43.3.10861 can request arbitrary addresses; the KEV due date is November 3.
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added actively exploited Citrix NetScaler flaw CVE-2026-88779 to the KEV catalog.
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA added two actively exploited Zammad flaws, session fixation and improper privilege management, to the KEV catalog.
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added actively exploited WordPress Core remote file inclusion CVE-2026-87902 to the KEV catalog.
FedRAMP VDR & VER: Daily Scans Are Only the Beginning
FedRAMP's mandatory VDR and VER rulesets take effect December 7, 2026, imposing tiered scan cadences and remediation clocks as short as 12 hours.
CISA is ending its monthly vulnerability bulletin
CISA will discontinue its weekly known-vulnerability bulletin on September 28, citing risk-based patching requirements under Binding Operational Directive BOD 26-04.
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added actively exploited Linux kernel flaw CVE-2025-39682 to its KEV catalog, requiring federal agencies to prioritize remediation under BOD 26-04.
1
CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot
CISA will discontinue its weekly vulnerability bulletin on September 28, shifting defenders toward risk-based prioritization via the KEV catalog.
CISA Warns of Critical ScreenConnect Vulnerability Actively Exploited in Attacks
CISA added actively exploited ConnectWise ScreenConnect flaw CVE-2026-84869 to the KEV catalog, setting a September 14 patch deadline.
7
CISA Warns of Critical GitLab Vulnerability Exploited in Attacks
CISA added actively exploited GitLab path traversal flaw CVE-2026-85706 to its KEV catalog, warning unauthenticated attackers can read arbitrary files including secrets.
3
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA added three actively exploited vulnerabilities — two JFrog Artifactory and one ConnectWise ScreenConnect — to its KEV Catalog.
2