CISA Adds Actively Exploited Vulnerabilities in Palo Alto Networks, Cisco, and Ahsay Products to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. These include a high-severity remote code execution (RCE) flaw in Palo Alto Networks PAN-OS (CVE-2026-0322), a critical relative path traversal vulnerability in Cisco Secure Email Gateway (CVE-2026-76519), and two vulnerabilities in Ahsay AhsayCBS. Federal civilian agencies are mandated to address these flaws by October 17, 2026, underscoring the significant risk posed by these actively exploited issues.