CISA
Every ZeroDayFeed story on CISA — across breaches, zero-days, ransomware, patches, policy, and industry, newest first.
-
Zero-Days & Exploits
SiteGuard WAF flaw CVE-2026-106931 exploited in the wild to run commands as root or SYSTEM
EG Secure Solutions and JPCERT/CC confirm in-the-wild exploitation of CVE-2026-106931, an OS command injection in SiteGuard Server Edition's default-on statistics feature that runs commands as root or SYSTEM. Fixed builds are 8.00 Update 5 and 7.00 Update 6.
-
Zero-Days & Exploits
CISA orders patching of exploited Fortinet path-traversal flaw tied to stealthy FortiGate implant at telecom
CISA added Fortinet's CVE-2025-61624 to its KEV catalog with an Oct 19 deadline and a forensic-triage requirement, as Palo Alto Networks links the flaw to a long-running telecom intrusion using a memory-resident FortiGate implant it calls PeerStitch.
-
Zero-Days & Exploits
Chinese espionage group exploited BeyondTrust Remote Support zero-day since August; CISA deadline is today
BeyondTrust has patched CVE-2026-102764, a Remote Support authentication bypass that Mandiant says has been exploited since Aug. 29 by Armory Castle (formerly UNC5221). CISA's KEV deadline for federal agencies is Oct. 19.
