CISA has confirmed that attackers are exploiting these 4 vulnerabilities. If you use any of the products below, check that the fixes are installed today.
Cisco Secure Email Gateway (CVE-2026-76519)
Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.
What to do: Install the maker's update now. If there is no update yet, follow the maker's own steps to reduce the risk, and stop using the product until it is fixed if neither is available.
Ahsay AhsayCBS (CVE-2026-105133)
Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with CVE-2026-105134.
What to do: Install the maker's update now. If there is no update yet, follow the maker's own steps to reduce the risk, and stop using the product until it is fixed if neither is available.
Palo Alto Networks PAN-OS (CVE-2026-0322)
Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.
What to do: Install the maker's update now. If there is no update yet, follow the maker's own steps to reduce the risk, and stop using the product until it is fixed if neither is available.
Ivanti Connect Secure (CVE-2026-104935)
Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.
What to do: Install the maker's update now. If there is no update yet, follow the maker's own steps to reduce the risk, and stop using the product until it is fixed if neither is available.
Tip of the day: Use a password manager
One strong, different password for every site, kept in a password manager, means a leak at one site does not open all the others.
Doing it once, properly
Cheaper is usually more expensive in the long run: a rushed or bargain setup is often done again from the start, and you pay twice, plus whatever the breach in between cost.
Sources
- CISA Known Exploited Vulnerabilities catalogue
- CVE-2026-76519 on the National Vulnerability Database
- CVE-2026-105133 on the National Vulnerability Database
- CVE-2026-0322 on the National Vulnerability Database
- CVE-2026-104935 on the National Vulnerability Database
Written each morning from CISA's catalogue of vulnerabilities known to be exploited, with the help of an AI model that runs on our own server. Check the sources before acting, and talk to us if you are not sure whether you are affected.