Cyber Security· Important

Four Exploited Flaws in PAN-OS, Cisco Email Gateway and Ahsay Backup Software Land on CISA's Must-Patch List

In short: CISA confirmed real-world exploitation of four vulnerabilities and placed them on its Known Exploited Vulnerabilities Catalog. The affected products span network security and backup infrastructure: Palo Alto Networks PAN-OS, Cisco Secure Email Gateway, and two separate flaws in Ahsay's AhsayCBS backup platform. Under Binding Operational Directive 26-04, federal civilian agencies must now remediate these on an accelerated timeline, and CISA urges every organization to do the same.

Source: CISA Advisories14 Oct 2026, 15:00CISA Original article ↗

This summary was generated automatically by AI from CISA Advisories's publication. It is our own text, not a copy of the original — facts, figures and quotes belong to the source, linked above and below.

What changed?

1Palo Alto Networks PAN-OS code injection flaw tracked as CVE-2026-0322
2Cisco Secure Email Gateway relative path traversal flaw tracked as CVE-2026-76519
3Ahsay AhsayCBS improper authentication flaw tracked as CVE-2026-105133
4Ahsay AhsayCBS command injection flaw tracked as CVE-2026-105134
5Federal agencies must prioritize patching on publicly exposed assets where exploitation grants full control, per BOD 26-04
6Agencies must also verify whether systems were already compromised before applying the patch

Why it matters

PAN-OS firewalls, Cisco email gateways and backup appliances like AhsayCBS sit at the perimeter or hold critical data, making them high-value targets; active exploitation means attackers are already using these flaws, not just theorizing about them.

What it means for AI agents and contact centers

If your company runs Palo Alto PAN-OS firewalls, Cisco Secure Email Gateway, or Ahsay AhsayCBS for backups anywhere in your infrastructure — including systems fronting VoIP/SIP trunks or call recordings — patch immediately and check logs for signs of prior compromise before applying fixes.

CVE KEV Catalog Palo Alto Networks Cisco Ahsay Vulnerability Management CISA

Sources

CISA AdvisoriesOfficialPrimary source
„CISA Adds Four Known Exploited Vulnerabilities to Catalog“
14 Oct 2026, 15:00
Licence: US federal government work (17 U.S.C. §105) · our summary (content changed)
Original article →

Published by source: 14 Oct 2026, 15:00
Found by our system: 14 Oct 2026, 23:41
Summary generated: 14 Oct 2026, 23:43

This article was written by AI from the original source. Facts, numbers and prices come from the source; missing values are marked “Not specified”. Legal notice, copyright and privacy