Cisco ISE Zero-Day Exploited, Plus KEV Movers to Patch Now
Cisco warns of a maximum severity Identity Services Engine zero-day under active attack, while GitLab, SonicWall, and cPanel flaws stay hot on CISA KEV.
Cisco ISE zero-day CVE-2026-76460 added to CISA KEV
Cisco ISE flaw CVE-2026-76460 (CVSS 10) is being exploited unauthenticated and is now on the CISA KEV list. Google Pixel and Acronis Backup were added too.
Cisco ISE CVE-2026-76460 and Pixel Zero-Day Hit CISA KEV
CISA added a CVSS 10 Cisco Identity Services Engine flaw, an exploited Google Pixel zero-day, and an Acronis Backup bug to the KEV catalog on September 16.
Cisco Secure Email Gateway Zero-Day CVE-2026-76461 Hits KEV
Cisco patched an actively exploited Secure Email Gateway SQL injection (CVE-2026-76461, CVSS 9.8), now on CISA KEV, that lets attackers run commands as root.
Cisco Secure Email Gateway added to CISA KEV
CISA added Cisco Secure Email Gateway SQL injection CVE-2026-76461 to KEV on Sept 14, while ScreenConnect and JFrog Artifactory flaws see active exploitation.
ScreenConnect worm-like attacks and September Windows patch fallout
ConnectWise patched a ScreenConnect flaw already exploited in worm-like attacks, while September Windows updates broke audio and RDS. Here is what to do first.
GitLab CVE-2026-85706 and ScreenConnect CVE-2026-84869 Hit KEV
CISA added a max severity GitLab path traversal flaw and a 9.9 ScreenConnect bug to KEV on September 11, with GitLab exploited one day after disclosure.
MikroTik RouterOS CVEs Added to CISA KEV, Cisco FMC Exploited
CISA added two actively exploited MikroTik RouterOS flaws to KEV on Sept 10, while Cisco FMC CVE-2026-20079 draws ransomware and state-sponsored attacks.
Cisco FMC CVE-2026-20079 Now Actively Exploited
CISA added a maximum severity Cisco Firewall Management Center authentication bypass to KEV, with ransomware and state-sponsored actors already exploiting it.
September 2026 Patch Tuesday: 974 CVEs and Two Zero-Days
Microsoft shipped a record 974 CVEs with two exploited zero-days, and CISA added four KEV entries including a Windows and N-able N-central bug. Patch now.
September Patch Tuesday breaks 974-CVE record, two zero-days
Microsoft shipped a record 974 fixes with two exploited zero-days, CISA added four KEV entries, and Google patched its seventh Chrome zero-day of 2026.
September 2026 Patch Tuesday: Microsoft Fixes 974, Two Zero-Days
September 2026 Patch Tuesday: Microsoft fixes 974 vulnerabilities, two exploited zero-days among them; Adobe patches a Magento zero-day used to backdoor sites.
CISA adds ownCloud CVE-2023-49105 to KEV catalog
CISA added ownCloud CVE-2023-49105, a Linux kernel flaw, and JFrog Artifactory to the KEV catalog on 2026-08-27, plus fresh Citrix NetScaler exploitation.
Citrix NetScaler CVE-2026-8452 Exploited, Nine New KEV Adds
Citrix NetScaler CVE-2026-8452 is now exploited in the wild and on the CISA KEV list, alongside nine new KEV additions including an ownCloud auth bypass.
August 2026 Patch Tuesday: 751 Fixes, One Exploited
Microsoft fixed 751 CVEs across 67 updates in August 2026, 108 rated Critical, and one is already being exploited. What to patch first, and why.
Adobe ColdFusion CVE-2026-48282 tops KEV movers with EPSS 0.99
Adobe ColdFusion path traversal CVE-2026-48282, CVSS 10 and CISA KEV listed, has EPSS 0.99. Plus SharePoint, Exchange, and a Zimbra campaign to check.
SharePoint CVE-2026-50522 in CISA KEV, Patch Now
Microsoft SharePoint RCE CVE-2026-50522 (CVSS 9.8) is on the CISA KEV list alongside Adobe ColdFusion CVE-2026-48282 and two Exchange flaws. Patch these first.
Russian Hackers Exploit Zimbra Zero-Day, ColdFusion Hits KEV
Russian actors are exploiting an unpatched Zimbra zero-day against US and Ukraine targets while Adobe ColdFusion CVE-2026-48282 sits on CISA KEV at CVSS 10.
Check Point SmartConsole Zero-Day CVE-2026-16232 Exploited
CISA added Check Point SmartConsole flaw CVE-2026-16232 (CVSS 9.1) to KEV after in-the-wild exploitation, alongside a SharePoint deserialization bug.
WordPress wp2shell CVEs added to CISA KEV as attacks spread
CISA added two WordPress Core flaws (CVE-2026-63030, CVE-2026-60137) to KEV on July 21 as wp2shell attacks install webshells.