Fortinet CLI Path Traversal Hit CISA KEV 185 Days After Fortinet Already Patched It
April advisory, October KEV. CVSS 6.0 authenticated CLI write/delete. Upgrade 7.6.5/7.4.10 trains, migrate dead ones, due Oct 19.
CISA KEV
Read Full News
BeyondTrust Remote Support Just Got Rooted by the People It Was Meant to Keep Out
Unauthenticated file ops on Remote Support, Mandiant zero-day abuse since late August, KEV Oct 16 due Oct 19. Patch BT26-05-RS, hunt SAWFLY/BARECLAW, rotate vaulted creds.
Your MSP Backup Console Got Webshells, Fake Edge XMRig, and a CISA KEV Stamp
Exploitation since October 7, hotfixes that actually close the door, KEV on October 14. Hunt MicrosoftEdgeUpdateSvc and rebuild dirty boxes.
Atlassian Just Handed Strangers Your WEB-INF and CISA Put It on the Calendar
Unauthenticated file read across eight Atlassian Data Center products. KEV on October 15, due October 18. Patch, mitigate, rotate Crowd secrets.
Hunt PAN-OS CVE-2026-0322: Three Attacker IPs and Management Plane Logs
Authenticated root RCE on the management interface, KEV the day of disclosure, three IPs in the advisory. Here is a lab grep session so you can hunt before the jump box excuse wears thin.
Cisco Secure Email Gateway Just Got Rooted by the Attachment It Was Scanning
Unauthenticated root via a crafted attachment on File Reputation. Patched builds from September, exploitation notice and KEV in mid-October. Check contentscannerstatus.
Hunt FortiMail CVE-2026-104286: archive234, ld.so.preload, and Bad Base64
Fortinet published hashes, IPs, and an archive account named archive234. Here is a lab grep-and-hash session so you can find tenants who moved in before the patch.
Windows Just Let Booby-Trapped Files Skip the Download Warning
Mark of the Web is supposed to warn you before invoice.pdf.exe runs. CVE-2026-96951 lets crafted files skip that warning. October Patch Tuesday is mandatory.
Ivanti Connect Secure Got Rooted Again, This Time By Three Bugs Holding Hands
Three bugs holding hands got UTA0576 root on a fully patched Ivanti Connect Secure box. CVE-2026-104935 is on CISA KEV. The priv-esc patch is still cooking.
Citrix NetScaler Is On Fire Again and Everyone Is Shocked, Shocked I Tell You
Another week, another NetScaler zero-day being kicked to death in the wild. CVE-2026-88779 is on CISA KEV, it needs SAML to bite, and no previous patch fixes it.