CISA adds Fortinet, BeyondTrust, and Atlassian flaws to KEV catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added nine new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog for the week of October 12 to October 18, 2026. The inclusion of these flaws indicates that attackers are actively using them in real-world scenarios.

Key additions include a path traversal vulnerability in multiple Fortinet products (CVE-2025-61624) and an authentication bypass vulnerability in BeyondTrust Remote Support (CVE-2026-102764). Researchers from Palo Alto Networks noted that the Fortinet flaw has been used by the PEERSTITCH malware to exploit FortiManager, potentially exposing over 500 firewalls and allowing attackers to maintain stealthy access within FortiOS memory.

Other vulnerabilities added to the catalog include flaws in Atlassian products, Cisco Secure Email Gateway, AhsayCBS, Palo Alto Networks PAN-OS, Microsoft Windows, and Ivanti Connect Secure. CISA mandates that federal agencies prioritize patching these specific vulnerabilities due to their active exploitation status.