CISA Adds Critical Fortinet and BeyondTrust Vulnerabilities to Known Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities, CVE-2025-61624 affecting Fortinet products and CVE-2026-102764 in BeyondTrust Remote Support, to its Known Exploited Vulnerabilities (KEV) catalog. Federal agencies are mandated to patch these flaws by October 19, 2026, as threat actors are actively exploiting them to compromise systems and gain unauthorized access.