Ethical Hacking News
U.S. CISA Adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway Flaws to Its Known Exploited Vulnerabilities Catalog: A Growing List of High-Priority Threats
Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway vulnerabilities have been added to the Known Exploited Vulnerabilities (KEV) catalog by the US Cybersecurity and Infrastructure Security Agency (CISA). The vulnerabilities are already being actively exploited in the wild, and organizations must prioritize their security to mitigate the risk of exploitation. The added vulnerabilities include a Code Injection Vulnerability (CVE-2026-0322) with a CVSS score of 8.6, an Improper Authentication Vulnerability (CVE-2026-105133) with a CVSS score of 5.5, and a Relative Path Traversal Vulnerability (CVE-2026-76519) with a CVSS score of 9.8. CISA orders federal agencies to fix the flaws by October 17, 2026, and experts recommend that private organizations review the KEV catalog and address the vulnerabilities in their infrastructure.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently added Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities (KEV) catalog. This move comes as part of the agency's ongoing efforts to provide timely warnings to federal agencies, critical infrastructure operators, and other organizations about potentially exploited vulnerabilities.
The KEV catalog is a list of vulnerabilities that are already being actively exploited in the wild, and for which a fix or patch is available. The addition of these three new vulnerabilities to the catalog is a significant development, highlighting the growing threat landscape and the need for organizations to prioritize their security.
Among the new additions is the Palo Alto Networks PAN-OS Code Injection Vulnerability (CVE-2026-0322), which has a CVSS score of 8.6. This vulnerability is a high-severity code injection vulnerability in the management interface of Palo Alto Networks PAN-OS, and could allow an authenticated attacker with network access and high-level privileges to execute arbitrary code with root privileges on an affected firewall.
Another new addition is the Ahsay AhsayCBS Improper Authentication Vulnerability (CVE-2026-105133), which has a CVSS score of 5.5. This vulnerability is an improper authentication vulnerability in AhsayCBS, a backup management platform. The flaw affects the checkSysPwd function in the product’s API and could allow a remote attacker to bypass authentication by manipulating the random parameter.
The third new addition is the Cisco Secure Email Gateway Relative Path Traversal Vulnerability (CVE-2026-76519), which has a CVSS score of 9.8. This vulnerability is a critical operating system command injection vulnerability in the Replication Receiver component of AhsayCBS. The flaw affects the /rps/api/json/UpdateReceivers.do endpoint and could allow an unauthenticated remote attacker to execute arbitrary commands on the underlying system.
Attackers have already begun exploiting these vulnerabilities in the wild, chaining them together to gain remote code execution with NT AUTHORITY\SYSTEM privileges, deploy JSP web shells and install XMRig cryptocurrency miners disguised as Microsoft Edge processes. Huntress reported that at least five organizations had been targeted by October 8, 2026.
Experts recommend that private organizations review the KEV catalog and address the vulnerabilities in their infrastructure. CISA orders federal agencies to fix the flaws by October 17, 2026.
In light of these new additions, organizations must take immediate action to assess their networks for these vulnerabilities and implement necessary patches and updates. This includes restricting access to trusted internal IP addresses, installing relevant security updates, and taking other measures to mitigate the risk of exploitation.
The addition of these vulnerabilities to the KEV catalog serves as a reminder of the ongoing threat landscape and the need for organizations to prioritize their security. As the threat landscape continues to evolve, it is essential for organizations to stay vigilant and take proactive steps to protect their networks.
Related Information:
https://www.ethicalhackingnews.com/articles/US-CISA-Adds-Palo-Alto-Networks-PAN-OS-Ahsay-AhsayCBS-and-Cisco-Secure-Email-Gateway-Flaws-to-Its-Known-Exploited-Vulnerabilities-Catalog-A-Growing-List-of-High-Priority-Threats-ehn.shtml
https://securityaffairs.com/201041/security/u-s-cisa-adds-palo-alto-networks-pan-os-ahsay-ahsaycbs-and-cisco-secure-email-gateway-flaws-to-its-known-exploited-vulnerabilities-catalog.html
https://nvd.nist.gov/vuln/detail/CVE-2026-0322
https://www.cvedetails.com/cve/CVE-2026-0322/
https://nvd.nist.gov/vuln/detail/CVE-2026-105133
https://www.cvedetails.com/cve/CVE-2026-105133/
https://nvd.nist.gov/vuln/detail/CVE-2026-76519
https://www.cvedetails.com/cve/CVE-2026-76519/
Published: Thu Oct 15 18:01:21 2026 by llama3.2 3B Q4_K_M
