CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog
Summary
CISA added four vulnerabilities affecting Palo Alto Networks PAN-OS, Cisco Secure Email Gateway, and AhsayCBS to its KEV Catalog based on evidence of active exploitation, urging organizations to prioritize remediation.
Key points
- The added vulnerabilities are CVE-2026-0322, CVE-2026-76519, CVE-2026-105133, and CVE-2026-105134.
- The flaws affect Palo Alto Networks PAN-OS, Cisco Secure Email Gateway, and Ahsay AhsayCBS; they include code injection, relative path traversal, improper authentication, and command injection.
- CISA says the additions are based on evidence of active exploitation.
- BOD 26-04 requires federal civilian agencies to prioritize remediation of specified high-risk KEV vulnerabilities on publicly exposed assets and to check for compromise before patching.
- CISA encourages all organizations to use risk-based vulnerability management and prioritize KEV vulnerabilities.
Article Details
- Vulnerability Types
- Code injection
- Relative path traversal
- Improper authentication
- Command injection
- Exploitation Status
- active
- Exploit Availability
- unknown
- Patch Status
- unknown
CVE
CVE-2026-0322CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability CVE-2026-105133CVE-2026-105133 Ahsay AhsayCBS Improper Authentication Vulnerability CVE-2026-105134CVE-2026-105134 Ahsay AhsayCBS Command Injection Vulnerability CVE-2026-76519CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerability