In a significant move to fortify national security against sophisticated foreign cyber espionage, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has formally updated its Known Exploited Vulnerabilities (KEV) catalog. The inclusion of five specific vulnerabilities—impacting ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND—marks a critical pivot in the international effort to neutralize the […]
Critical Fortinet FortiMail Flaw Added to CISA KEV Catalog Amid Active In-the-Wild Exploitation
By Ravie Lakshmanan | October 02, 2026 Vulnerability / Enterprise Security Main Facts The United States Cybersecurity and Infrastructure Security Agency (CISA) has officially added a critical security vulnerability impacting Fortinet’s FortiMail secure email gateway to its heavily watched Known Exploited Vulnerabilities (KEV) catalog. The inclusion follows mounting intelligence and direct telemetry confirming that threat […]