Vulnerabilities
Apple CVE-2026-86950 Out-of-Bounds Write Added to CISA KEV Catalog
CISA has added CVE-2026-86950, an out-of-bounds write affecting multiple Apple products, to its Known Exploited Vulnerabilities catalog. The flaw can grant full control over exposed assets, and federal agencies must prioritize remediation. Defenders should patch immediately, verify system integrity, and monitor for exploitation indicators.
What Happened
CISA has officially added CVE-2026-86950 to its Known Exploited Vulnerabilities catalog after confirming active exploitation. The flaw is an out‑of‑bounds write that can be triggered in several Apple products.
Impact
The vulnerability can allow an attacker to gain total control over a system that is publicly exposed. It is considered high risk for federal agencies and any organization running the affected Apple software.
Mitigation Steps
- Apply the latest security update for the affected Apple product as soon as it is available.
- Verify that the patch has been installed on all exposed endpoints.
- Check logs for signs of exploitation, such as unexpected memory corruption or privilege escalation events.
- Implement network segmentation to limit the blast radius of a potential compromise.
- Report any suspected exploitation to CISA through the KEV Nomination Form if you believe the vulnerability is not yet cataloged.
Related vulnerabilities
CISA Adds WordPress Remote File Inclusion CVE-2026-87902 to KEV Catalog
CISA has added CVE-2026-87902, a WordPress Core Remote File Inclusion flaw, to its Known Exploited Vulnerabilities catalog after confirmed active exploitation. Federal agencies must prioritize patching, and all organizations should treat the vulnerability as high risk and follow remediation guidance.
Read briefing
CISA Expands KEV Catalog with GitLab Path Traversal CVE-2026-85706
CISA has added CVE-2026-85706, a path‑traversal flaw in GitLab Community and Enterprise Editions, to its Known Exploited Vulnerabilities catalog after confirmed active exploitation. The move reinforces the agency’s push for rapid patching of high‑risk bugs under BOD 26‑04 and serves as a reminder for all organizations to prioritize KEV fixes.
Read briefing
CISA Adds Four Exploited Vulnerabilities to KEV Catalog
CISA has added four CVEs—CVE‑2026‑0322, CVE‑2026‑76519, CVE‑2026‑105133, CVE‑2026‑105134—to its Known Exploited Vulnerabilities catalog. The vulnerabilities affect Palo Alto Networks PAN‑OS, Cisco Secure Email Gateway, and Ahsay AhsayCBS, and grant attackers full control of exposed assets. Defenders should prioritize patching and verify no compromise before applying updates.
Read briefing
CISA Adds CVE-2026-21589 to Known Exploited Vulnerabilities Catalog
CISA has added CVE-2026-21589, a file and directory disclosure flaw in multiple Atlassian products, to its Known Exploited Vulnerabilities catalog. Federal agencies must prioritize patching and verify that exposed assets are not compromised. All organizations should adopt risk‑based remediation for KEV entries.
Read briefing