CISA adds actively exploited Fortinet and BeyondTrust vulnerabilities to Known Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2025-61624 affecting Fortinet Multiple Products (path traversal) and CVE-2026-102764 affecting BeyondTrust Remote Support (authentication bypass). These flaws are actively being exploited, with the Fortinet vulnerability used by PEERSTITCH malware to compromise firewalls.