<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Grayhaven exploit watch: everything from cisco, fortinet</title>
    <link>https://www.grayhavenindustries.com/watch</link>
    <description>Flaws CISA confirms are exploited, and the platform incidents Grayhaven is following.</description>
    <language>en-us</language>
    <atom:link href="https://www.grayhavenindustries.com/watch/feed.xml?vendor=cisco%2Cfortinet" rel="self" type="application/rss+xml" />
    <item>
      <title>CVE-2026-76418: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software</title>
      <link>https://www.grayhavenindustries.com/watch/CVE-2026-76418</link>
      <description>Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. Federal agencies must fix it by 2026-11-01.</description>
      <pubDate>Thu, 29 Oct 2026 00:00:00 GMT</pubDate>
      <guid isPermaLink="false">https://www.grayhavenindustries.com/watch/CVE-2026-76418</guid>
    </item>
    <item>
      <title>CVE-2025-61624: Fortinet Multiple Products</title>
      <link>https://www.grayhavenindustries.com/watch/CVE-2025-61624</link>
      <description>FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands. Federal agencies must fix it by 2026-10-19.</description>
      <pubDate>Fri, 16 Oct 2026 00:00:00 GMT</pubDate>
      <guid isPermaLink="false">https://www.grayhavenindustries.com/watch/CVE-2025-61624</guid>
    </item>
    <item>
      <title>CVE-2026-76519: Cisco Secure Email Gateway</title>
      <link>https://www.grayhavenindustries.com/watch/CVE-2026-76519</link>
      <description>Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. Federal agencies must fix it by 2026-10-17.</description>
      <pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate>
      <guid isPermaLink="false">https://www.grayhavenindustries.com/watch/CVE-2026-76519</guid>
    </item>
  </channel>
</rss>
