Vulnerabilities · 5h ago
CISA puts firewall, mail, and backup flaws on clock CISA added four exploited flaws to its Known Exploited Vulnerabilities catalog at once: Palo Alto Networks PAN-OS CVE-2026-0322 , Cisco Secure Email Gateway CVE-2026-76519 , and two AhsayCBS bugs, forcing US federal civilian agencies to move by October 17. The mix spans a firewall, an email gateway, and backup software, so the deadline pressure is landing across three different control points, not one product line.
The Cisco flaw is a path-traversal bug in Secure Email Gateway’s attachment handling when File Reputation is enabled; Cisco says a crafted email can make the appliance write files and run root commands. Ahsay’s two bugs can be chained to bypass authentication and execute commands, and Ahsay says earlier fixes were incomplete. Palo Alto’s PAN-OS issue sits in the management interface, where an authenticated attacker with network access can reach root code execution.
For operators, the common thread is trusted infrastructure becoming the entry point. If these systems sit on your mail path, management network, or backup plane, compromise can change traffic handling, mail filtering, or data recovery long after the first patch lands.
NVD KEV
Known exploited · CISA KEV
CVSS 10 CRITICAL: a flaw has been found in Ahsay AhsayCBS up to 10.3.2. EPSS 3% (88th percentile).
CISA federal remediation date Oct 17
NVD KEV
Known exploited · CISA KEV
CVSS 7.3 HIGH: a vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. EPSS 0.7% (51st percentile).
CISA federal remediation date Oct 17
NVD KEV
Known exploited · CISA KEV
CVSS 9.8 CRITICAL: a vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an…
CISA federal remediation date Oct 17
NVD KEV
Known exploited · CISA KEV
CISA federal remediation date Oct 17
Timeline Sources 10 sources covering this story
CSO Online Oct 15
Attackers exploit Palo Alto PAN-OS flaw for root access as CISA orders three-day fix
A newly disclosed management interface bug is under limited attack, and federal agencies must patch and check affected firewalls for compromise by October 17.
Help Net Security Oct 15
CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products - Help Net Security
CISA added four bugs, CVE-2026-0322, CVE-2026-76519, CVE-2026-105133 and CVE-2026-105134, to its Known Exploited Vulnerabilities catalog.
CSIRT Italia / ACN Oct 15
Palo Alto Networks: rilevato sfruttamento in rete della CVE-2026-0322 relativa a PAN-OS
Palo Alto Networks ha rilasciato aggiornamenti di sicurezza per sanare molteplici vulnerabilità, di cui una con gravità “alta” relativa a PAN-OS per la quale è stato rilevato lo sfruttamento attivo in rete.
INCIBE-CERT Oct 15
Inyección de código en PAN-OS de Palo Alto Networks
Suraj Siddharudh, de Palo Alto Networks, ha informado sobre una vulnerabilidad de severidad alta que
INCIBE-CERT Oct 15
Múltiples vulnerabilidades en productos de Cisco
Cisco ha publicado 6 vulnerabilidades: 5 de severidad crítica y una de severidad alta que, en caso de
CSIRT Italia / ACN Oct 15
Cisco: rilevato sfruttamento in rete della CVE-2026-76519 relativa a Secure Email Gateway
Cisco ha rilevato lo sfruttamento in rete di una vulnerabilità critica, identificata tramite la CVE-2026-76519, in Advanced Malware Protection di Cisco Secure Email Gateway, soluzione per la protezione e la gestione della posta elettronica.
SecurityWeek Oct 15
Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution
The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available.
The Hacker News Oct 15
AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches
Ahsay released new AhsayCBS hotfixes for two exploited flaws chained to deploy web shells and XMRig miners after earlier patches fell short.
SecurityWeek Oct 15
Cisco Warns of Exploited Secure Email Gateway Vulnerability
Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root privileges.
The Hacker News Oct 15
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
Palo Alto Networks patched an exploited PAN-OS flaw that lets authenticated attackers with management interface access execute code as root.
BleepingComputer Oct 15
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls.
The Register Security Oct 14
Cisco make-me-root email bug exploited as a 0-day by unknown crims
Both Switchzilla and CISA sound the alarm
Entities CVE-2026-0322 CVE-2026-76519 CVE-2026-105133 CVE-2026-105134 Vendor digest: Cisco
Vendor digest: Palo Alto Networks
Part of the PlainSec briefing for 2026-10-15
Editions Related stories Vulnerabilities · 5h ago
CISA puts firewall, mail, and backup flaws on clock CISA added four exploited flaws to its Known Exploited Vulnerabilities catalog at once: Palo Alto Networks PAN-OS CVE-2026-0322 , Cisco Secure Email Gateway CVE-2026-76519 , and two AhsayCBS bugs, forcing US federal civilian agencies to move by October 17. The mix spans a firewall, an email gateway, and backup software, so the deadline pressure is landing across three different control points, not one product line.
The Cisco flaw is a path-traversal bug in Secure Email Gateway’s attachment handling when File Reputation is enabled; Cisco says a crafted email can make the appliance write files and run root commands. Ahsay’s two bugs can be chained to bypass authentication and execute commands, and Ahsay says earlier fixes were incomplete. Palo Alto’s PAN-OS issue sits in the management interface, where an authenticated attacker with network access can reach root code execution.
For operators, the common thread is trusted infrastructure becoming the entry point. If these systems sit on your mail path, management network, or backup plane, compromise can change traffic handling, mail filtering, or data recovery long after the first patch lands.
NVD KEV
Known exploited · CISA KEV
CVSS 10 CRITICAL: a flaw has been found in Ahsay AhsayCBS up to 10.3.2. EPSS 3% (88th percentile).
CISA federal remediation date Oct 17
NVD KEV
Known exploited · CISA KEV
CVSS 7.3 HIGH: a vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. EPSS 0.7% (51st percentile).
CISA federal remediation date Oct 17
NVD KEV
Known exploited · CISA KEV
CVSS 9.8 CRITICAL: a vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an…
CISA federal remediation date Oct 17
NVD KEV
Known exploited · CISA KEV
CISA federal remediation date Oct 17
Timeline Sources 10 sources covering this story
CSO Online Oct 15
Attackers exploit Palo Alto PAN-OS flaw for root access as CISA orders three-day fix
A newly disclosed management interface bug is under limited attack, and federal agencies must patch and check affected firewalls for compromise by October 17.
Help Net Security Oct 15
CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products - Help Net Security
CISA added four bugs, CVE-2026-0322, CVE-2026-76519, CVE-2026-105133 and CVE-2026-105134, to its Known Exploited Vulnerabilities catalog.
CSIRT Italia / ACN Oct 15
Palo Alto Networks: rilevato sfruttamento in rete della CVE-2026-0322 relativa a PAN-OS
Palo Alto Networks ha rilasciato aggiornamenti di sicurezza per sanare molteplici vulnerabilità, di cui una con gravità “alta” relativa a PAN-OS per la quale è stato rilevato lo sfruttamento attivo in rete.
INCIBE-CERT Oct 15
Inyección de código en PAN-OS de Palo Alto Networks
Suraj Siddharudh, de Palo Alto Networks, ha informado sobre una vulnerabilidad de severidad alta que
INCIBE-CERT Oct 15
Múltiples vulnerabilidades en productos de Cisco
Cisco ha publicado 6 vulnerabilidades: 5 de severidad crítica y una de severidad alta que, en caso de
CSIRT Italia / ACN Oct 15
Cisco: rilevato sfruttamento in rete della CVE-2026-76519 relativa a Secure Email Gateway
Cisco ha rilevato lo sfruttamento in rete di una vulnerabilità critica, identificata tramite la CVE-2026-76519, in Advanced Malware Protection di Cisco Secure Email Gateway, soluzione per la protezione e la gestione della posta elettronica.
SecurityWeek Oct 15
Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution
The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available.
The Hacker News Oct 15
AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches
Ahsay released new AhsayCBS hotfixes for two exploited flaws chained to deploy web shells and XMRig miners after earlier patches fell short.
SecurityWeek Oct 15
Cisco Warns of Exploited Secure Email Gateway Vulnerability
Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root privileges.
The Hacker News Oct 15
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
Palo Alto Networks patched an exploited PAN-OS flaw that lets authenticated attackers with management interface access execute code as root.
BleepingComputer Oct 15
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls.
The Register Security Oct 14
Cisco make-me-root email bug exploited as a 0-day by unknown crims
Both Switchzilla and CISA sound the alarm
Entities CVE-2026-0322 CVE-2026-76519 CVE-2026-105133 CVE-2026-105134 Vendor digest: Cisco
Vendor digest: Palo Alto Networks
Part of the PlainSec briefing for 2026-10-15
Editions Related stories