CISA 2026-10-14

CISA KEV — Palo Alto Networks PAN-OS (CVE-2026-0322) +3 more

Machine-generated analysis · WAYSCloud LLM

Four CVEs—CVE-2026-0322, CVE-2026-76519, CVE-2026-105133, CVE-2026-105134—have been added to CISA’s KEV Catalog. They are flagged due to observed active exploitation.

Context

The catalog entries affect Palo Alto Networks PAN-OS, Cisco Secure Email Gateway, and AhsayCBS (Ahsay). CISA states these vulnerabilities are being actively exploited and therefore meet the criteria for inclusion in the KEV Catalog. BOD 26-04 directs federal agencies to prioritize rapid remediation of such high-risk flaws on publicly exposed assets that grant total control.

Operator considerations

Check: Verify whether any PAN-OS, Cisco Secure Email Gateway, or AhsayCBS instances are deployed and whether they are internet-facing.
Isolate: Limit public network access to those services until patches are applied.
Patch: Apply vendor-released patches or mitigations for the listed CVEs as soon as they become available.
Log: Monitor logs for exploitation attempts or related indicators tied to these CVEs.

From Cybersecurity and Infrastructure Security Agency ↗

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability

CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerability

CVE-2026-105133 Ahsay AhsayCBS Improper Authentication Vulnerability

CVE-2026-105134 Ahsay AhsayCBS Command Injection Vulnerability

These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.

Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulner...

Read the full advisory on CISA →