4 stories · “cisa”.
CISA added three exploited Linux kernel flaws to its KEV catalog on 18 September 2026 and gave federal civilian agencies until 21 September to patch them.
Cisco disclosed nine Identity Services Engine vulnerabilities on September 16; an unauthenticated 10.0 bypass is already being exploited in the wild.
Cisco disclosed CVE-2026-76461, a 9.8 SQL injection in Secure Email Gateway that is already exploited; CISA set a September 17 patch deadline.
Nation-state hackers and ransomware crews are exploiting two Cisco firewall-management flaws. Cisco Talos detailed three intrusion clusters this week; federal agencies must patch by September 12.
