CVE-2026-105134
Known exploited · CISA KEV
CVSS 10 CRITICAL: a flaw has been found in Ahsay AhsayCBS up to 10.3.2. EPSS 3% (88th percentile).
CISA federal remediation date Oct 17
Vulnerabilities & Exploits · Zero-Day Exploit
CISA added four exploited flaws to its Known Exploited Vulnerabilities catalog at once: Palo Alto Networks PAN-OS CVE-2026-0322, Cisco Secure Email Gateway CVE-2026-76519, and two AhsayCBS bugs, forcing US federal civilian agencies to move by October 17. The mix spans a firewall, an email gateway, and backup software, so the deadline pressure is landing across three different control points, not one product line.
The Cisco flaw is a path-traversal bug in Secure Email Gateway’s attachment handling when File Reputation is enabled; Cisco says a crafted email can make the appliance write files and run root commands. Ahsay’s two bugs can be chained to bypass authentication and execute commands, and Ahsay says earlier fixes were incomplete. Palo Alto’s PAN-OS issue sits in the management interface, where an authenticated attacker with network access can reach root code execution.
For operators, the common thread is trusted infrastructure becoming the entry point. If these systems sit on your mail path, management network, or backup plane, compromise can change traffic handling, mail filtering, or data recovery long after the first patch lands.
10 sources · 6h ago
Known exploited · CISA KEV
CVSS 10 CRITICAL: a flaw has been found in Ahsay AhsayCBS up to 10.3.2. EPSS 3% (88th percentile).
CISA federal remediation date Oct 17
Known exploited · CISA KEV
CVSS 7.3 HIGH: a vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. EPSS 0.7% (51st percentile).
CISA federal remediation date Oct 17
Known exploited · CISA KEV
CVSS 9.8 CRITICAL: a vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an…
CISA federal remediation date Oct 17
Known exploited · CISA KEV
CISA federal remediation date Oct 17
CSO Online
Attackers exploit Palo Alto PAN-OS flaw for root access as CISA orders three-day fix
A newly disclosed management interface bug is under limited attack, and federal agencies must patch and check affected firewalls for compromise by October 17.
originalHelp Net Security
CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products - Help Net Security
CISA added four bugs, CVE-2026-0322, CVE-2026-76519, CVE-2026-105133 and CVE-2026-105134, to its Known Exploited Vulnerabilities catalog.
originalCSIRT Italia / ACN
Palo Alto Networks: rilevato sfruttamento in rete della CVE-2026-0322 relativa a PAN-OS
Palo Alto Networks ha rilasciato aggiornamenti di sicurezza per sanare molteplici vulnerabilità, di cui una con gravità “alta” relativa a PAN-OS per la quale è stato rilevato lo sfruttamento attivo in rete.
originalVendor digest: Palo Alto Networks
Part of the PlainSec briefing for 2026-10-15
Every edition of this story: CISA puts firewall, mail, and backup flaws on clock