Tag

#cisa-kev

4 stories · “cisa-kev”.

The Adobe World Headquarters in San Jose, California, two white office towers with dark glass windows under a clear blue sky.

Nov 1, 2026

CISA Flags PolyShell as Exploited While the Magento Campaign Hits Hundreds of Stores

CISA added the PolyShell flaw to its exploited-vulnerabilities list on 27 October. Sansec says a campaign has hit 953 Magento and Adobe Commerce stores.

By TPW Editorial8 min read

The rear ports and status lights of a Fortinet FortiGate 6501F security appliance.

Oct 7, 2026

Fortinet's FortiMail Zero-Day Lets Attackers Write Files Without Logging In

Fortinet disclosed CVE-2026-104286, a 9.8-severity FortiMail zero-day, on October 1, 2026, and CISA told federal agencies to patch or mitigate by October 4.

By TPW Editorial9 min read

Cisco's headquarters building at the company's San Jose main campus.

Oct 5, 2026

Cisco's SD-WAN Manager Zero-Day Lets Attackers In as Admin

Cisco patched CVE-2026-76504, a 9.8-severity authentication bypass in Catalyst SD-WAN Manager, on September 30, 2026. Attackers are already exploiting it.

By TPW Editorial8 min read

The Citrix headquarters building, with the company name on its facade.

Oct 2, 2026

Two Citrix NetScaler Zero-Days, Three Weeks Undetected, and Now Mass Exploitation

Citrix patched two critical NetScaler ADC and Gateway zero-days on September 27, 2026, but attackers had been inside customer networks for several weeks.

By TPW Editorial9 min read