2026-10-24
Exploited edge device vulnerabilities, mid-October 2026: Ivanti, PAN-OS, FortiOS, Cisco
Between October 13 and 16, 2026, CISA added four vulnerabilities in widely deployed edge devices (equipment that sits at the boundary between a network and the internet) to its Known Exploited Vulnerabilities (KEV) catalog: Ivanti Connect Secure CVE-2026-104935 (authentication bypass, no login needed, CVSS 8.6), Palo Alto Networks PAN-OS CVE-2026-0322 (code execution in the management interface, high-privilege login needed, CVSS v4.0 8.6), Fortinet FortiOS and related products CVE-2025-61624 (path traversal, admin login needed, CVSS 6.0), and Cisco Secure Email Gateway CVE-2026-76519 (arbitrary file write, no login needed, CVSS 9.8). Atlassian Data Center CVE-2026-21589 (file read, no login needed) followed on October 15. All federal due dates have passed. This site's conclusion: if you run any of these five products, upgrade to a fixed release today, restrict management access to administrative networks, and check for compromise before upgrading.