CISA Adds Actively Exploited Vulnerabilities in Palo Alto, Cisco, and Ahsay Products to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including a high-severity remote code execution (RCE) flaw in Palo Alto Networks PAN-OS (CVE-2026-0322), a critical path traversal vulnerability in Cisco Secure Email Gateway (CVE-2026-76519), and two critical flaws in Ahsay AhsayCBS. Federal civilian agencies are mandated to address these actively exploited vulnerabilities by October 17, 2026.