Added to CISA KEV this week

Every record CISA added to the Known Exploited Vulnerabilities catalogue in the last seven days, by the date CISA published, not by the date we noticed.

CVE-2025-61624no title heldadded 2026-10-16

CVE-2026-102764Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Supportadded 2026-10-16

CVE-2026-21589no title heldadded 2026-10-15

CVE-2026-0322PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interfaceadded 2026-10-14

CVE-2026-105133Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authenticationadded 2026-10-14

CVE-2026-105134Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injectionadded 2026-10-14

CVE-2026-76519Cisco Secure Email Gateway Arbitrary File Write Vulnerabilityadded 2026-10-14

CVE-2026-104935no title heldadded 2026-10-13

CVE-2026-96951Windows Shell Security Feature Bypass Vulnerabilityadded 2026-10-13

9 records, read from the index as it stood on 2026-10-11 to 2026-10-18. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.