The agency's October 14 update put four vulnerabilities on the Known Exploited Vulnerabilities list, all under active attack. The one to watch is CVE-2026-0322, a code-injection flaw in Palo Alto Networks PAN-OS that can hand an attacker root-level remote code execution on an exposed firewall; BleepingComputer reports CISA set an October 17 mitigation deadline for federal civilian agencies. Alongside it: a relative-path-traversal bug in Cisco's Secure Email Gateway (CVE-2026-76519) and two Ahsay AhsayCBS backup-server flaws — an improper-authentication bug (CVE-2026-105133) and a command-injection one (CVE-2026-105134). The binding directive only obligates federal agencies, but exposed edge appliances are exposed to everyone. If you run PAN-OS at your perimeter, treat the firewall patch as this week's real work — it's the one being hit now, not the one that might be. The rest warrant a check of your inventory before the week is out.