Today, attackers are targeting BeyondTrust Remote Support, Fortinet products, Atlassian products, and Ahsay AhsayCBS. Small businesses should ensure their systems are up-to-date and secure.
BeyondTrust Remote Support (CVE-2026-102764)
BeyondTrust Remote Support allows attackers to perform file operations on the appliance by spoofing authentication. Businesses should update their BeyondTrust products to the latest version.
What to do: Install the maker's update now. If there is no update yet, follow the maker's own steps to reduce the risk, and stop using the product until it is fixed if neither is available.
Fortinet Multiple Products (CVE-2025-61624)
Fortinet products can be exploited via path traversal vulnerabilities. Admins should review and update their Fortinet products to mitigate this risk.
What to do: Install the maker's update now. If there is no update yet, follow the maker's own steps to reduce the risk, and stop using the product until it is fixed if neither is available.
Atlassian Multiple Products (CVE-2026-21589)
Atlassian products can be accessed by attackers through directory traversal. Users should ensure their Atlassian products are up-to-date and monitor for any unauthorized access attempts.
What to do: Install the maker's update now. If there is no update yet, follow the maker's own steps to reduce the risk, and stop using the product until it is fixed if neither is available.
Ahsay AhsayCBS (CVE-2026-105134)
Ahsay AhsayCBS can be exploited for command injection. Businesses should update their Ahsay products and ensure proper security controls are in place to prevent unauthorized operations.
What to do: Install the maker's update now. If there is no update yet, follow the maker's own steps to reduce the risk, and stop using the product until it is fixed if neither is available.
Tip of the day: Turn on automatic updates
Most of the attacks in this list work only on software that has not been updated. Let your phone, computer and browser update themselves, and restart when they ask.
Doing it once, properly
Saving now often means paying twice: cut-price IT work is frequently rebuilt from the start, and the outage or breach before the rebuild is the expensive part.
Sources
- CISA Known Exploited Vulnerabilities catalogue
- CVE-2026-102764 on the National Vulnerability Database
- CVE-2025-61624 on the National Vulnerability Database
- CVE-2026-21589 on the National Vulnerability Database
- CVE-2026-105134 on the National Vulnerability Database
Written each morning from CISA's catalogue of vulnerabilities known to be exploited, with the help of an AI model that runs on our own server. Check the sources before acting, and talk to us if you are not sure whether you are affected.