CISA Known Exploited Vulnerabilities (KEV)

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. This is a critical threat mapped to CVE-2025-61624, CVE-2026-102764; security leaders should validate exposure, prioritize patching, and verify compensating controls.

CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support

CISA is aware of critical authentication bypass vulnerability CVE-2026-102764, affecting BeyondTrust Remote Support (formerly Bomgar) versions 26.2.3 and earlier. Patches are avail... This is a critical threat mapped to CVE-2026-102764; security leaders should validate exposure, prioritize patching, and verify compe...

BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability

BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance. This is a critical threat mapped to CVE-2026-102764; security leaders should validate exposure, prioritize patching, and verify compensating controls.

Fortinet Multiple Products Path Traversal Vulnerability

FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands. This is a critical threat mapped to CVE-2025-61624; security leade...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. This is a critical threat mapped to CVE-2026-21589; security leaders should validate exposure, prioritize patching, and verify compensating controls.