<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Cisa on Onur Baydaş</title><link>https://onurbaydas.com/en/tags/cisa/</link><description>Recent content in Cisa on Onur Baydaş</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Sat, 17 Oct 2026 12:15:22 +0300</lastBuildDate><atom:link href="https://onurbaydas.com/en/tags/cisa/index.xml" rel="self" type="application/rss+xml"/><item><title>Ahsay AhsayCBS Command Injection Vulnerability</title><link>https://onurbaydas.com/en/news/2026-10-17-ahsay-cbs-command-injection/</link><pubDate>Sat, 17 Oct 2026 12:15:22 +0300</pubDate><guid>https://onurbaydas.com/en/news/2026-10-17-ahsay-cbs-command-injection/</guid><description>A command injection vulnerability (CVE-2026-105134) has been discovered in Ahsay AhsayCBS, allowing remote attackers to execute operating system commands via an endpoint in the Replication Receiver component. This vulnerability is actively being exploited in the wild.</description></item><item><title>Atlassian Products File Access Vulnerability</title><link>https://onurbaydas.com/en/news/2026-10-17-atlassian-products-file-access-vulnerability/</link><pubDate>Sat, 17 Oct 2026 12:15:22 +0300</pubDate><guid>https://onurbaydas.com/en/news/2026-10-17-atlassian-products-file-access-vulnerability/</guid><description>A vulnerability has been identified in multiple Atlassian Data Center products, allowing an unauthenticated attacker to access specific files within the web application root directory. This vulnerability is listed in the CISA KEV catalog and is actively being exploited in the wild.</description></item><item><title>BeyondTrust Remote Support Authentication Bypass Vulnerability (CISA KEV Alert)</title><link>https://onurbaydas.com/en/news/2026-10-17-beyondtrust-remote-support-auth-bypass/</link><pubDate>Sat, 17 Oct 2026 12:15:22 +0300</pubDate><guid>https://onurbaydas.com/en/news/2026-10-17-beyondtrust-remote-support-auth-bypass/</guid><description>CISA is warning about an actively exploited authentication bypass vulnerability (CVE-2026-102764) in BeyondTrust Remote Support. This flaw could allow a remote attacker to perform file operations on the appliance.</description></item><item><title>Cisco Secure Email Gateway Relative Path Traversal Vulnerability</title><link>https://onurbaydas.com/en/news/2026-10-17-cisco-email-gateway-path-traversal/</link><pubDate>Sat, 17 Oct 2026 12:15:22 +0300</pubDate><guid>https://onurbaydas.com/en/news/2026-10-17-cisco-email-gateway-path-traversal/</guid><description>A relative path traversal vulnerability (CVE-2026-76519) has been identified in Cisco Secure Email Gateway, allowing an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is listed in the CISA KEV catalog and is actively being exploited in the wild.</description></item><item><title>Fortinet Products Path Traversal Vulnerability (CISA KEV Alert)</title><link>https://onurbaydas.com/en/news/2026-10-17-fortinet-path-traversal-cisa-kev/</link><pubDate>Sat, 17 Oct 2026 12:15:22 +0300</pubDate><guid>https://onurbaydas.com/en/news/2026-10-17-fortinet-path-traversal-cisa-kev/</guid><description>CISA is warning about an actively exploited path traversal vulnerability (CVE-2025-61624) in multiple Fortinet products. This flaw could allow an authenticated attacker to write or delete arbitrary files.</description></item><item><title>Palo Alto Networks PAN-OS Code Injection Vulnerability</title><link>https://onurbaydas.com/en/news/2026-10-17-palo-alto-panos-code-injection/</link><pubDate>Sat, 17 Oct 2026 12:15:22 +0300</pubDate><guid>https://onurbaydas.com/en/news/2026-10-17-palo-alto-panos-code-injection/</guid><description>A code injection vulnerability (CVE-2026-0322) has been identified in Palo Alto Networks PAN-OS, allowing an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. This vulnerability is listed in the CISA KEV catalog and is actively being exploited in the wild.</description></item></channel></rss>