Following insights from Security Affairs, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities affecting Fortinet products and BeyondTrust Remote Support to its Known Exploited Vulnerabilities (KEV) catalog. This action mandates federal agencies to patch these flaws by Oct 19, 2026, to mitigate significant security risks.
The vulnerabilities include CVE-2025-61624, a path traversal flaw in Fortinet products that was exploited by the PEERSTITCH malware to compromise over 500 firewalls. The malware used this vulnerability in the FortiOS auto-script engine to deploy an implant and maintain stealthy access. Additionally, CVE-2026-102764, an authentication bypass vulnerability in BeyondTrust Remote Support, allows attackers to gain initial access, escalate privileges, and move laterally within networks. CISA warns that threat actors are actively exploiting this flaw. Organizations, including private sector entities, are urged to review the KEV catalog and address these vulnerabilities to prevent exploitation.
Source: Security Affairs
