【Vulnerability Alert】CISA Adds 9 Known Exploited Vulnerabilities to the KEV Catalog (2026/10/12-2026/10/18)
publish date :
2026-10-22
update date :
2026-10-22
Source: Ministry of education information & communication security contingency platform
| Publication Number | TACERT-ANA-2026102109105656 | Publication Time | 2026-10-21 09:51:57 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2026-10-21 09:51:57 |
| Impact Level | Low | ||
| [Subject] 【Vulnerability Alert】CISA Adds 9 Known Exploited Vulnerabilities to the KEV Catalog (2026/10/12-2026/10/18) |
|||
| [Content] Forwarded from TWCERTCC-200-202610-00000029 【CVE-2026-104935】Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability (CVSS v3.1: 8.6) 【Ransomware Exploitation: Unknown】 Ivanti Connect Secure has an authentication bypass vulnerability that allows an unauthenticated remote attacker to execute arbitrary commands. 【CVE-2026-96951】Microsoft Windows Command Injection Vulnerability (CVSS v3.1: 8.8) 【Ransomware Exploitation: Unknown】 Microsoft Windows Shell has a command injection vulnerability that allows an unauthorized attacker to bypass security features over the network. 【CVE-2026-105134】Ahsay AhsayCBS Command Injection Vulnerability (CVSS v3.1: 10.0) 【Ransomware Exploitation: Unknown】 Ahsay AhsayCBS has a command injection vulnerability that allows a remote attacker to execute operating system commands by manipulating random parameters of the /rps/api/json/UpdateReceivers.do endpoint in the Replication Receiver component. 【CVE-2026-76519】Cisco Secure Email Gateway Relative Path Traversal Vulnerability (CVSS v3.1: 9.8) 【Ransomware Exploitation: Unknown】 Cisco Secure Email Gateway has a relative path traversal vulnerability that allows an unauthenticated remote attacker to exploit this vulnerability to write arbitrary files to the underlying operating system. 【CVE-2026-105133】Ahsay AhsayCBS Improper Authentication Vulnerability (CVSS v3.1: 7.3) 【Ransomware Exploitation: Unknown】 Ahsay AhsayCBS has an improper authentication vulnerability that allows a remote attacker to bypass the authentication mechanism by manipulating random parameters of the checkSysPwd function in the API component. 【CVE-2026-0322】Palo Alto Networks PAN-OS Code Injection Vulnerability (CVSS v3.1: 7.2) 【Ransomware Exploitation: Unknown】 Palo Alto Networks PAN-OS has a code injection vulnerability that allows an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. 【CVE-2026-21589】Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability (CVSS v4.0: 9.3) 【Ransomware Exploitation: Unknown】 Multiple Atlassian products have a vulnerability that allows files or directories to be accessible to external parties, potentially allowing an unauthenticated attacker to access specific files within the web application root directory in affected versions. 【CVE-2026-102764】BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability (CVSS v3.1: 9.8) 【Ransomware Exploitation: Unknown】 BeyondTrust Remote Support has an authentication bypass vulnerability that may allow a remote attacker to perform file operations on the device. 【CVE-2025-61624】Fortinet Multiple Products Path Traversal Vulnerability (CVSS v3.1: 6.0) 【Ransomware Exploitation: Unknown】 FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager have a path traversal vulnerability that may allow an authenticated attacker with administrator privileges and at least read and write permissions to write or delete arbitrary files through specific CLI commands. Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform] 【CVE-2026-104935】Please refer to the affected versions listed by the vendor: https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935 【CVE-2026-96951】Please refer to the affected versions listed by the vendor: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951 【CVE-2026-105134】Please refer to the affected versions listed by the vendor: https://www.ahsay.com/en/support/help-centre/release-notes/cbs/v10.3.4 【CVE-2026-76519】Please refer to the affected versions listed by the vendor: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp 【CVE-2026-105133】Please refer to the affected versions listed by the vendor: https://www.ahsay.com/en/support/help-centre/release-notes/cbs/v10.3.4 【CVE-2026-0322】Please refer to the affected versions listed by the vendor: https://security.paloaltonetworks.com/CVE-2026-0322 【CVE-2026-21589】Please refer to the affected versions listed by the vendor: https://confluence.atlassian.com/security/cve-2026-21589-arbitrary-file-access-vulnerability-impacts-multiple-products-1870495748.html 【CVE-2026-102764】Please refer to the affected versions listed by the vendor: https://www.beyondtrust.com/blog/entry/bt26-05 【CVE-2025-61624】Please refer to the affected versions listed by the vendor: https://fortiguard.fortinet.com/psirt/FG-IR-26-122 |
|||
| [Recommended Actions] 【CVE-2026-104935】 The vendor has released a security update to address this vulnerability. Please update to the relevant version: https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935 【CVE-2026-96951】 The vendor has released a security update to address this vulnerability. Please update to the relevant version: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951 【CVE-2026-105134】 The vendor has released a security update to address this vulnerability. Please update to the relevant version: https://www.ahsay.com/en/support/help-centre/release-notes/cbs/v10.3.4 【CVE-2026-76519】 The vendor has released a security update to address this vulnerability. Please update to the relevant version: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp 【CVE-2026-105133】 The vendor has released a security update to address this vulnerability. Please update to the relevant version: https://www.ahsay.com/en/support/help-centre/release-notes/cbs/v10.3.4 【CVE-2026-0322】 The vendor has released a security update to address this vulnerability. Please update to the relevant version: https://security.paloaltonetworks.com/CVE-2026-0322 【CVE-2026-21589】 The vendor has released a security update to address this vulnerability. Please update to the relevant version: https://confluence.atlassian.com/security/cve-2026-21589-arbitrary-file-access-vulnerability-impacts-multiple-products-1870495748.html 【CVE-2026-102764】 The vendor has released a security update to address this vulnerability. Please update to the relevant version: https://www.beyondtrust.com/blog/entry/bt26-05 【CVE-2025-61624】 The vendor has released a security update to address this vulnerability. Please update to the relevant version: https://fortiguard.fortinet.com/psirt/FG-IR-26-122 |
|||
|
[Reference]
|
|||
(This notification is for informational purposes only and does not constitute a cybersecurity incident).
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
Organizer:
Computer Center