/
← Voltar ao feed
critical government

CISA adds four exploited flaws in Check Point, Arista VeloCloud Orchestrator and F5 BIG-IP APM to KEV Catalog

1 fonte(s) · 1 atualização(ões) · publicado 22/09/2026 09:00 · coletado há 1 dia

CISA added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-22, citing evidence of active exploitation. The entries affect Check Point (two flaws in multiple products), Arista VeloCloud Orchestrator and F5 BIG-IP APM. The alert gives no exploitation details, threat actor attribution or IOCs. CISA notes that these vulnerability types are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. The alert also restates the requirements of BOD 26-04 for Federal Civilian Executive Branch (FCEB) agencies.

Technical Details

  • CVE-2026-85102: Check Point Multiple Products, improper certificate validation.
  • CVE-2026-93616: Check Point Multiple Products, path traversal.
  • CVE-2026-93952: Arista VeloCloud Orchestrator, improper input validation.
  • CVE-2026-94127: F5 BIG-IP APM, heap-based buffer overflow.
  • Affected versions, exploitation methods, threat actors and IOCs are not provided in the alert.

Remediation

  • BOD 26-04 requires FCEB agencies to prioritize rapid remediation of KEV-listed CVEs on publicly exposed assets that grant total control of the asset after exploitation, and allows deferring lower-risk vulnerabilities.
  • BOD 26-04 sets basic expectations for when agencies must check whether threat actors compromised a system before the patch was applied.
  • CISA encourages all organizations, not only FCEB agencies, to adopt risk-based vulnerability management and prioritize KEV Catalog vulnerabilities.
  • Consult the vendor advisories from Check Point, Arista and F5 for patch guidance.

Linha do tempo

  1. cisa.gov ↗ · pub. 22/09/2026 09:00 · coletado 19/10 18:37 primeiro registro

    CISA adds four exploited flaws in Check Point, Arista VeloCloud Orchestrator and F5 BIG-IP APM to KEV Catalog

    ler a análise desta fonte

    CISA added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-22, citing evidence of active exploitation. The entries affect Check Point (two flaws in multiple products), Arista VeloCloud Orchestrator and F5 BIG-IP APM. The alert gives no exploitation details, threat actor attribution or IOCs. CISA notes that these vulnerability types are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. The alert also restates the requirements of BOD 26-04 for Federal Civilian Executive Branch (FCEB) agencies.

    Technical Details

    • CVE-2026-85102: Check Point Multiple Products, improper certificate validation.
    • CVE-2026-93616: Check Point Multiple Products, path traversal.
    • CVE-2026-93952: Arista VeloCloud Orchestrator, improper input validation.
    • CVE-2026-94127: F5 BIG-IP APM, heap-based buffer overflow.
    • Affected versions, exploitation methods, threat actors and IOCs are not provided in the alert.

    Remediation

    • BOD 26-04 requires FCEB agencies to prioritize rapid remediation of KEV-listed CVEs on publicly exposed assets that grant total control of the asset after exploitation, and allows deferring lower-risk vulnerabilities.
    • BOD 26-04 sets basic expectations for when agencies must check whether threat actors compromised a system before the patch was applied.
    • CISA encourages all organizations, not only FCEB agencies, to adopt risk-based vulnerability management and prioritize KEV Catalog vulnerabilities.
    • Consult the vendor advisories from Check Point, Arista and F5 for patch guidance.