CISA Adds Fortinet Path Traversal (CVE‑2025‑61624) and BeyondTrust Auth‑Bypass (CVE‑2026‑102764) to KEV Catalog – Active Exploitation Signals Urgent Patch Prioritization
What It Is – The Cybersecurity and Infrastructure Security Agency (CISA) announced that two vulnerabilities—Fortinet’s path‑traversal flaw (CVE‑2025‑61624) and BeyondTrust Remote Support authentication‑bypass (CVE‑2026‑102764)—have been confirmed as actively exploited and are now listed in the Known Exploited Vulnerabilities (KEV) Catalog.
Exploitability – Both CVEs have public evidence of exploitation in the wild; CISA’s inclusion in the KEV catalog indicates a high likelihood of successful attacks against unpatched assets.
Affected Products – Fortinet multiple firewall/UTM products (specific models disclosed in vendor advisory) and BeyondTrust Remote Support (formerly Bomgar) agents.
Why It Matters for Trust & Control Assurance
- Demonstrates the need for continuous vulnerability‑management controls that can surface newly‑exploited flaws in near‑real time.
- Provides audit‑ready evidence that an organization is prioritizing remediation of high‑risk KEV items, a requirement increasingly referenced in federal and private‑sector security assessments.
- Highlights the importance of mapping remediation actions to a unified control framework (e.g., NIST CSF) so that a single control objective—“Vulnerability Management and Patch Prioritization”—covers multiple regulatory expectations.
Recommended Actions
- Cross‑reference your asset inventory against Fortinet and BeyondTrust product lists; confirm version numbers.
- Apply the vendor‑supplied patches immediately or implement compensating controls (e.g., network segmentation, application‑layer firewalls).
- Record remediation dates and evidence in your centralized control‑mapping system to satisfy audit trails.
Source: CISA Advisory – 16 Oct 2026