logo

CISA Adds Two Known Exploited Vulnerabilities to Catalog

ID: 2bd11e7d-cb6e-54d9-b605-d5d90431eeb2

STIX ID: report--2bd11e7d-cb6e-54d9-b605-d5d90431eeb2

Feed Name: CISA Advisories

Threat Score
70/100

Date Published: 2026-09-24

Date Updated: 2026-10-16

Author: CISA

...
...

CISA added two CVEs—CVE-2026-5430 (WSO2 path traversal) and CVE-2026-71362 (Adobe Commerce/Magento incorrect authorization)—to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation, and reminds agencies to prioritize remediation per BOD 26-04 while encouraging all organizations to adopt risk-based vulnerability management.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.