Ethical Hacking News
U.S. CISA Adds Fortinet Multiple Products and BeyondTrust Remote Support Flaws to Its Known Exploited Vulnerabilities Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities (KEV) catalog, highlighting the growing concern of cyber threats in the modern era. This latest development is a stark reminder of the importance of prioritizing cybersecurity and taking proactive measures to protect against known vulnerabilities. CISA urges federal agencies and private organizations to review the KEV catalog and address the vulnerabilities in their infrastructure to prevent potential exploitation.
Fortinet Multiple Products and BeyondTrust Remote Support vulnerabilities have been added to the Known Exploited Vulnerabilities (KEV) catalog by CISA. The vulnerabilities, including a path traversal flaw and an authentication bypass vulnerability, pose a significant risk to federal information systems and critical infrastructure. Cyber threat actors are actively exploiting these vulnerabilities to gain initial access, establish persistence, and escalate privileges. CISA has issued a binding operational directive requiring federal agencies to address the identified vulnerabilities by a due date. Private organizations are urged to review the KEV catalog and address the vulnerabilities in their infrastructure to prevent potential exploitation.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently added Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities (KEV) catalog, highlighting the growing concern of cyber threats in the modern era. This latest development is a stark reminder of the importance of prioritizing cybersecurity and taking proactive measures to protect against known vulnerabilities.
The KEV catalog is a centralized repository of known exploited vulnerabilities that pose a significant risk to federal information systems and the nation's critical infrastructure. The addition of Fortinet Multiple Products and BeyondTrust Remote Support flaws to this catalog underscores the potential for widespread exploitation and the need for immediate action to address these vulnerabilities.
Fortinet Multiple Products, a range of security solutions designed to protect networks and systems, has been identified as vulnerable to a path traversal flaw (CVE-2025-61624). This vulnerability allows attackers to execute arbitrary code and potentially gain unauthorized access to the system. Similarly, BeyondTrust Remote Support, a remote technical support tool used by IT help desks and support teams, has been found to have an authentication bypass vulnerability (CVE-2026-102764). This vulnerability enables attackers to bypass authentication mechanisms and gain privileged access to the system.
The impact of these vulnerabilities cannot be overstated. According to CISA, cyber threat actors are actively exploiting these vulnerabilities to gain initial access, establish persistence, escalate privileges, and move laterally. This can result in significant disruptions to critical infrastructure, compromising sensitive data and potentially leading to serious consequences.
In light of this development, CISA has issued a binding operational directive (BOD) 22-01, which requires federal agencies to address the identified vulnerabilities by the due date. Private organizations are also urged to review the KEV catalog and address the vulnerabilities in their infrastructure to prevent potential exploitation.
The addition of Fortinet Multiple Products and BeyondTrust Remote Support flaws to the KEV catalog serves as a stark reminder of the importance of prioritizing cybersecurity and staying vigilant against emerging threats. As the threat landscape continues to evolve, it is essential for organizations to remain proactive and take immediate action to address known vulnerabilities.
The recent additions to the KEV catalog demonstrate the importance of staying informed about known exploited vulnerabilities and taking proactive measures to protect against them. As the threat landscape continues to evolve, it is essential for organizations to remain vigilant and take immediate action to address known vulnerabilities.
Related Information:
https://www.ethicalhackingnews.com/articles/US-CISA-Adds-Fortinet-Multiple-Products-and-BeyondTrust-Remote-Support-Flaws-to-Its-Known-Exploited-Vulnerabilities-Catalog-ehn.shtml
https://securityaffairs.com/201178/security/u-s-cisa-adds-fortinet-multiple-products-and-beyondtrust-remote-support-flaws-to-its-known-exploited-vulnerabilities-catalog.html
https://www.cisa.gov/news-events/alerts/2026/10/16/cisa-adds-two-known-exploited-vulnerabilities-catalog
https://nvd.nist.gov/vuln/detail/CVE-2025-61624
https://www.cvedetails.com/cve/CVE-2025-61624/
https://nvd.nist.gov/vuln/detail/CVE-2026-102764
https://www.cvedetails.com/cve/CVE-2026-102764/
Published: Sat Oct 17 07:51:23 2026 by llama3.2 3B Q4_K_M
