Patch/Configuration Management

CVE-2026-1281 and CVE-2026-1340 have CVSS scores of 9.8 and have already been exploited.

Cisco Talos reported that exploited vulnerabilities were responsible for nearly 40% of all intrusions in the fourth quarter of 2025.

The patches address four critical vulnerabilities: CVE-2025-40552 and CVE-2025-40554, which allow remote authentication bypass, CVE-2025-40553, a remote code execution (RCE) flaw due to untrusted data deserialization, and CVE-2025-40551, another RCE vulnerability.

The flaws affect the platform’s expression engine and Python Code Node.

Fortinet has issued emergency updates to address the critical FortiCloud SSO authentication bypass vulnerability, tracked as CVE-2026-24858, after momentarily deactivating FortiCloud SSO and blocking FortiCloud accounts observed in zero-day intrusions earlier this month, reports SecurityWeek.

Vulnerability lets threat actors drop malware into the Windows Startup folder.

The vm2 library, designed to run untrusted JavaScript code in a secure context, has a history of sandbox-escape vulnerabilities.

The inclusion of these vulnerabilities in CISA's KEV catalog mandates federal agencies to address them by February 16, 2026, under Binding Operational Directive 22-01.