CISA adds exploited Palo Alto PAN-OS, Cisco Secure Email Gateway and Ahsay flaws to KEV catalog
Firewalls and email gateways sit at the edge of the network, and root access on them lets an attacker watch or redirect traffic while evading the controls those devices provide. Because the PAN-OS flaw requires management interface access, the most effective immediate control is confirming that those interfaces are reachable only from dedicated administrative networks. Backup platforms such as AhsayCBS deserve equal attention, since compromising backups weakens ransomware recovery.
What Happened
CISA added four actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2026-0322 in Palo Alto Networks PAN-OS, CVE-2026-76519 in Cisco Secure Email Gateway, and CVE-2026-105133 and CVE-2026-105134 in Ahsay AhsayCBS, with a federal civilian remediation deadline of 17 October 2026. CVE-2026-0322 lets an authenticated attacker with network access to the management interface run arbitrary code as root on PA-Series and VM-Series firewalls and Panorama. Cloud NGFW and Prisma Access are not affected.
Why It Matters
Firewalls and email gateways sit at the edge of the network, and root access on them lets an attacker watch or redirect traffic while evading the controls those devices provide. Because the PAN-OS flaw requires management interface access, the most effective immediate control is confirming that those interfaces are reachable only from dedicated administrative networks. Backup platforms such as AhsayCBS deserve equal attention, since compromising backups weakens ransomware recovery.
Sources
- Cybersecurity and Infrastructure Security Agency (opens in a new tab): CISA Adds Four Known Exploited Vulnerabilities to Catalog (2026-10-14)
- Help Net Security (opens in a new tab): CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products (2026-10-15)
More From This Briefing
- CISA urges immediate patching of exploited BeyondTrust Remote Support authentication bypass
- Anthropic signs first Canadian data centre lease with EverWind in Nova Scotia
- EU AI Office opens first AI Act enforcement steps against frontier model providers
- ILS Bermuda Convergence warned of investor overexposure to AI and data centre risk
This story is part of the Laurenceo Intelligence briefing for 18 October 2026, a daily sourced briefing on AI, technology and enterprise risk published in Bermuda by Laurenceo, founded by Jorai Laurenceo. It is produced by an automated research pipeline and checked before publication; how this is made. General information only, not legal, regulatory or financial advice.