Topic tag

CISA KEV

4 articles tagged CISA KEV. Browse the full archive or jump to all posts.

October 4, 2026 · 9 min read

FortiMail CVE-2026-104286: A 9.8 File Write on the Appliance You Never Revisit

CISA put FortiMail's unauthenticated 9.8 file write into KEV on 1 October. An exposed, forgotten mail gateway is a weekend job now.

September 27, 2026 · 11 min read

F5 BIG-IP: A 9.8 You Reach Through the Auth Header, With No Credentials

CVE-2026-94127 is a heap overflow in BIG-IP APM that you can reach unauthenticated from the data plane. F5 shipped engineering hotfixes on 22 September and CISA gave US federal agencies three days. The only question that matters for your estate is whether you run APM as an OAuth Authorization Server.

September 20, 2026 · 13 min read

Three Linux kernel bugs hit CISA's exploited list the same day four public root exploits landed

CISA added three Linux kernel flaws to its known-exploited catalog on 18 September 2026. Four public local-root exploits landed the same day.

August 2, 2026 · 7 min read

Three claimed CISA KEV additions: the IT-pro verification and triage checklist

A practical workflow for ANZ IT teams to verify new CISA KEV entries, map them to their stack, and plan remediation without trusting unverified vulnerability details.