Cyber Security· Important

Active Attacks Confirmed Against Fortinet and BeyondTrust Products, CISA Warns

In short: Real-world exploitation has pushed CISA to list two fresh vulnerabilities in its Known Exploited Vulnerabilities (KEV) Catalog: a path traversal bug spanning multiple Fortinet products (CVE-2025-61624) and an authentication-bypass-by-spoofing flaw in BeyondTrust Remote Support (CVE-2026-102764). Because both are already being abused by attackers, Binding Operational Directive 26-04 forces federal civilian agencies to fast-track fixes on any internet-facing systems where exploitation could hand over full control. The directive also requires agencies to check whether a system was already breached before the patch lands. CISA is urging every organization, not only government ones, to follow the same prioritized patching logic.

Source: CISA Advisories16 Oct 2026, 15:00CISA Original article ↗

This summary was generated automatically by AI from CISA Advisories's publication. It is our own text, not a copy of the original — facts, figures and quotes belong to the source, linked above and below.

What changed?

1Fortinet multiple products: path traversal vulnerability, CVE-2025-61624, added to KEV Catalog
2BeyondTrust Remote Support: authentication bypass by spoofing, CVE-2026-102764, added to KEV Catalog
3Both vulnerabilities have confirmed evidence of active exploitation
4Under BOD 26-04, FCEB agencies must prioritize patching publicly exposed assets where exploitation grants total control
5Agencies are also required to check for prior compromise before applying patches

Why it matters

Both products are common in enterprise remote-access and network-security setups, so publicly reachable instances are realistic targets for attackers right now, not just a theoretical risk.

What it means for AI agents and contact centers

If your infrastructure relies on Fortinet appliances or BeyondTrust Remote Support for remote administration of voice or contact-center systems, check exposed instances against these CVEs and patch immediately, since unauthenticated access or path traversal on such gateways could expose internal servers handling call data.

CVE Fortinet BeyondTrust KEV Catalog Vulnerability Management Remote Access

Sources

CISA AdvisoriesOfficialPrimary source
„CISA Adds Two Known Exploited Vulnerabilities to Catalog“
16 Oct 2026, 15:00
Licence: US federal government work (17 U.S.C. §105) · our summary (content changed)
Original article →

Published by source: 16 Oct 2026, 15:00
Found by our system: 16 Oct 2026, 21:12
Summary generated: 16 Oct 2026, 21:13

This article was written by AI from the original source. Facts, numbers and prices come from the source; missing values are marked “Not specified”. Legal notice, copyright and privacy