CISA Cybersecurity Directives & Advisories
Material regulatory developments from Cybersecurity and Infrastructure Security Agency are tracked daily by Cresthaven Analytics. Over the last 90 days, 20 material briefs relevant to professionals operating in the technology, ai & competition sector have been published below. Each brief is sourced directly from the primary regulatory feed, summarized for institutional readers, and scored for materiality.
Recent material activity
CISA adds Google Chromium V8 type confusion vulnerability to Known Exploited Vulnerabilities catalog with federal remediation deadline of September 18 2026
CISA added CVE-2026-85046, a type confusion vulnerability in Google Chromium V8, to its Known Exploited Vulnerabilities catalog on September 4, 2026. Federal agencies face a mandatory remediation deadline of September 18…
Read the full CISA Cybersecurity Directives & Advisories brief →CISA adds SonicWall SMA1000 OS command injection flaw to Known Exploited Vulnerabilities catalog with September 5 federal remediation deadline
CISA added CVE-2026-83549, an OS command injection vulnerability in SonicWall SMA1000 Appliances, to its Known Exploited Vulnerabilities catalog on September 2, 2026. The addition imposes a federal remediation deadline o…
Read the full CISA Cybersecurity Directives & Advisories brief →CISA adds SonicWall SMA1000 server-side request forgery flaw to Known Exploited Vulnerabilities catalog with September 5 federal remediation deadline
CISA added CVE-2026-83548, a server-side request forgery vulnerability in SonicWall SMA1000 appliances, to the Known Exploited Vulnerabilities catalog on September 2, 2026. Federal civilian agencies must remediate by Sep…
Read the full CISA Cybersecurity Directives & Advisories brief →CISA adds Sangoma Switchvox SQL injection flaw to Known Exploited Vulnerabilities catalog with federal remediation deadline of September 5, 2026
CISA added CVE-2026-9586, a SQL injection vulnerability in Sangoma Switchvox, to its Known Exploited Vulnerabilities catalog on September 2, 2026. The flaw allows unauthenticated remote attackers to execute arbitrary SQL…
Read the full CISA Cybersecurity Directives & Advisories brief →CISA adds JFrog Artifactory authentication bypass to Known Exploited Vulnerabilities catalog with September 5 federal remediation deadline
CISA added CVE-2026-82329, an improper authentication vulnerability in JFrog Artifactory, to its Known Exploited Vulnerabilities catalog on September 2, 2026. Under default configuration, the flaw permits an unauthentica…
Read the full CISA Cybersecurity Directives & Advisories brief →CISA adds Kestra OSS unauthenticated command injection flaw to Known Exploited Vulnerabilities catalog with September 5 federal deadline
CISA added CVE-2026-49869, an OS command injection vulnerability in Kestra OSS, to its Known Exploited Vulnerabilities catalog on September 2, 2026. The flaw permits unauthenticated remote attackers to create and execute…
Read the full CISA Cybersecurity Directives & Advisories brief →CISA adds Kludex Starlette HTTP smuggling flaw to Known Exploited Vulnerabilities catalog with September 16 federal remediation deadline
CISA added CVE-2026-48710, an HTTP request/response smuggling vulnerability in Kludex Starlette, to the Known Exploited Vulnerabilities catalog on September 2, 2026. The listing imposes a federal remediation deadline of …
Read the full CISA Cybersecurity Directives & Advisories brief →CISA adds BerriAI LiteLLM authentication bypass to Known Exploited Vulnerabilities catalog with federal remediation deadline of September 16, 2026
CISA added CVE-2026-59822 to the Known Exploited Vulnerabilities catalog on September 2, 2026. The vulnerability is an improper authentication flaw in BerriAI LiteLLM's MCP Streamable HTTP endpoint. Federal agencies face…
Read the full CISA Cybersecurity Directives & Advisories brief →CISA adds PaperCut NG/MF authentication bypass to Known Exploited Vulnerabilities catalog with September 14 federal remediation deadline
CISA added CVE-2026-81578, a missing authentication vulnerability in PaperCut NG/MF print management software, to its Known Exploited Vulnerabilities catalog on August 31, 2026. Federal agencies must remediate by Septemb…
Read the full CISA Cybersecurity Directives & Advisories brief →CISA adds PaperCut NG/MF unsafe reflection flaw to Known Exploited Vulnerabilities catalog with September 14 federal remediation deadline
CISA added CVE-2026-82078, an unsafe reflection vulnerability in PaperCut NG/MF print management software, to its Known Exploited Vulnerabilities catalog on August 31, 2026. Federal agencies must remediate by September 1…
Read the full CISA Cybersecurity Directives & Advisories brief →CISA adds JFrog Artifactory path-traversal vulnerability to Known Exploited Vulnerabilities catalog with September 10 federal remediation deadline
CISA added CVE-2026-66384, a path-traversal vulnerability in JFrog Artifactory, to its Known Exploited Vulnerabilities catalog on August 27, 2026. Federal agencies must remediate by September 10, 2026 and conduct forensi…
Read the full CISA Cybersecurity Directives & Advisories brief →CISA adds Linux Kernel IPv6 privilege-escalation vulnerability to Known Exploited Vulnerabilities catalog with August 30 federal remediation deadline
CISA added CVE-2026-53362, a Linux Kernel vulnerability enabling privilege escalation through the IPv6 networking subsystem, to its Known Exploited Vulnerabilities catalog on August 27, 2026. The addition triggers mandat…
Read the full CISA Cybersecurity Directives & Advisories brief →CISA adds ownCloud improper authentication flaw to Known Exploited Vulnerabilities catalog with August 30 federal remediation deadline
CISA added CVE-2023-49105, an improper authentication vulnerability in ownCloud, to its Known Exploited Vulnerabilities catalog on August 27, 2026. The flaw permits unauthenticated access, modification, or deletion of an…
Read the full CISA Cybersecurity Directives & Advisories brief →CISA adds 2019 Microsoft SQL Server remote code execution flaw to Known Exploited Vulnerabilities catalog with August 29 federal remediation deadline
CISA added CVE-2019-1068, a remote code execution vulnerability in Microsoft SQL Server, to its Known Exploited Vulnerabilities catalog on August 26, 2026. The addition triggers mandatory remediation obligations for fede…
Read the full CISA Cybersecurity Directives & Advisories brief →CISA adds Citrix NetScaler memory buffer vulnerability to Known Exploited Vulnerabilities catalog with August 29 federal remediation deadline
CISA added CVE-2026-8452, a memory buffer vulnerability in Citrix NetScaler ADC and NetScaler Gateway, to its Known Exploited Vulnerabilities catalog on August 26, 2026. The addition imposes a federal agency remediation …
Read the full CISA Cybersecurity Directives & Advisories brief →CISA adds Linux Kernel out-of-bounds write flaw to Known Exploited Vulnerabilities catalog with September 9 federal remediation deadline
CISA added CVE-2022-0995, a Linux Kernel out-of-bounds memory write vulnerability, to its Known Exploited Vulnerabilities catalog on August 26, 2026. Federal agencies face a mandatory remediation deadline of September 9,…
Read the full CISA Cybersecurity Directives & Advisories brief →CISA adds Gitea code injection vulnerability to Known Exploited Vulnerabilities catalog with August 28 federal remediation deadline
CISA added CVE-2026-60004, a code injection vulnerability in Gitea, to its Known Exploited Vulnerabilities catalog on August 25, 2026. Federal agencies must apply vendor mitigations or discontinue use by August 28, 2026.
Read the full CISA Cybersecurity Directives & Advisories brief →CISA adds Oracle HTTP Server and WebLogic Proxy Plug-in access control flaw to Known Exploited Vulnerabilities catalog with August 27 federal deadline
CISA added CVE-2026-21962 to the Known Exploited Vulnerabilities catalog on August 24, 2026. The vulnerability involves improper access control in Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-in, permitting u…
Read the full CISA Cybersecurity Directives & Advisories brief →CISA adds unauthenticated Zimbra OS command injection flaw to Known Exploited Vulnerabilities catalog with August 24 federal deadline
CISA added CVE-2026-73570, an OS command injection vulnerability in Synacor Zimbra Collaboration Suite, to the Known Exploited Vulnerabilities catalog on August 21, 2026. The flaw allows unauthenticated remote attackers …
Read the full CISA Cybersecurity Directives & Advisories brief →CISA adds Microsoft Entra ID deserialization vulnerability to Known Exploited Vulnerabilities catalog with August 24 federal remediation deadline
CISA added CVE-2026-69836, a deserialization of untrusted data vulnerability in Microsoft Entra ID, to its Known Exploited Vulnerabilities catalog on August 21, 2026. The remediation deadline is August 24, 2026 — three d…
Read the full CISA Cybersecurity Directives & Advisories brief →
Get every CISA Cybersecurity Directives & Advisories brief delivered the day it lands
From $149/month
Cresthaven Analytics monitors Cybersecurity and Infrastructure Security Agency continuously, applying institutional materiality scoring to every release. Subscribers receive structured briefs via email, portal, and (Executive tier and above) real-time alerts.
View all tiers →