BEGIN:VCALENDAR VERSION:2.0 PRODID:-//EVULNABLE//KEV Remediation Deadlines//EN CALSCALE:GREGORIAN METHOD:PUBLISH X-WR-CALNAME:EVULNABLE — CISA KEV Remediation Deadlines X-WR-CALDESC:Federal remediation due dates from the CISA Known Exploited Vu lnerabilities Catalog. Public domain (US government work). https://evulnab le.com/vulnerability-management/notices BEGIN:VEVENT UID:CVE-2015-3306-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261011 SUMMARY:CVE-2015-3306 remediation due — ProFTPD DESCRIPTION:ProFTPD Improper Access Control Vulnerability. EVULNABLE Risk: 93 (Immediate). URL:https://evulnable.com/vulnerability-management/cve/CVE-2015-3306 END:VEVENT BEGIN:VEVENT UID:CVE-2015-5477-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261011 SUMMARY:CVE-2015-5477 remediation due — ISC DESCRIPTION:ISC BIND Data Processing Errors Vulnerability. EVULNABLE Risk: 90 (Immediate). URL:https://evulnable.com/vulnerability-management/cve/CVE-2015-5477 END:VEVENT BEGIN:VEVENT UID:CVE-2016-3081-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261011 SUMMARY:CVE-2016-3081 remediation due — Apache DESCRIPTION:Apache Struts Command Injection Vulnerability. EVULNABLE Risk: 90 (Immediate). URL:https://evulnable.com/vulnerability-management/cve/CVE-2016-3081 END:VEVENT BEGIN:VEVENT UID:CVE-2026-71362-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20260927 SUMMARY:CVE-2026-71362 remediation due — Adobe DESCRIPTION:Adobe Commerce and Magento Incorrect Authorization Vulnerabilit y. EVULNABLE Risk: 89 (Immediate). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-71362 END:VEVENT BEGIN:VEVENT UID:CVE-2026-93616-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20260925 SUMMARY:CVE-2026-93616 remediation due — Check Point DESCRIPTION:Check Point Multiple Products Path Traversal Vulnerability. EVU LNABLE Risk: 87 (Immediate). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-93616 END:VEVENT BEGIN:VEVENT UID:CVE-2026-85102-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20260925 SUMMARY:CVE-2026-85102 remediation due — Check Point DESCRIPTION:Check Point Multiple Products Improper Certificate Validation V ulnerability. EVULNABLE Risk: 80 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-85102 END:VEVENT BEGIN:VEVENT UID:CVE-2026-87902-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20260928 SUMMARY:CVE-2026-87902 remediation due — WordPress DESCRIPTION:WordPress Core Remote File Inclusion Vulnerability. EVULNABLE R isk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-87902 END:VEVENT BEGIN:VEVENT UID:CVE-2026-104935-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261016 SUMMARY:CVE-2026-104935 remediation due — Ivanti DESCRIPTION:Ivanti Connect Secure Authentication Bypass by Spoofing Vulnera bility. EVULNABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-104935 END:VEVENT BEGIN:VEVENT UID:CVE-2021-3199-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261011 SUMMARY:CVE-2021-3199 remediation due — ONLYOFFICE DESCRIPTION:ONLYOFFICE Docs Server Path Traversal Vulnerability. EVULNABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2021-3199 END:VEVENT BEGIN:VEVENT UID:CVE-2026-21589-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261018 SUMMARY:CVE-2026-21589 remediation due — Atlassian DESCRIPTION:Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability. EVULNABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-21589 END:VEVENT BEGIN:VEVENT UID:CVE-2026-42018-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20260925 SUMMARY:CVE-2026-42018 remediation due — JFrog DESCRIPTION:JFrog Artifactory Improper Authentication Vulnerability. EVULNA BLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-42018 END:VEVENT BEGIN:VEVENT UID:CVE-2026-42016-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20260925 SUMMARY:CVE-2026-42016 remediation due — JFrog DESCRIPTION:JFrog Artifactory Incorrect Authorization Vulnerability. EVULNA BLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-42016 END:VEVENT BEGIN:VEVENT UID:CVE-2026-105134-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261017 SUMMARY:CVE-2026-105134 remediation due — Ahsay DESCRIPTION:Ahsay AhsayCBS Command Injection Vulnerability. EVULNABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-105134 END:VEVENT BEGIN:VEVENT UID:CVE-2023-22894-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261011 SUMMARY:CVE-2023-22894 remediation due — Strapi DESCRIPTION:Strapi Cleartext Storage of Sensitive Information Vulnerability . EVULNABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2023-22894 END:VEVENT BEGIN:VEVENT UID:CVE-2026-87491-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20260923 SUMMARY:CVE-2026-87491 remediation due — Google DESCRIPTION:Google Chromium V8 Out of Bounds Write Vulnerability. EVULNABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-87491 END:VEVENT BEGIN:VEVENT UID:CVE-2026-7273-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20260924 SUMMARY:CVE-2026-7273 remediation due — Zyxel DESCRIPTION:Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulner ability. EVULNABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-7273 END:VEVENT BEGIN:VEVENT UID:CVE-2026-94127-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20260925 SUMMARY:CVE-2026-94127 remediation due — F5 DESCRIPTION:F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability. EVULNAB LE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-94127 END:VEVENT BEGIN:VEVENT UID:CVE-2026-104286-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261004 SUMMARY:CVE-2026-104286 remediation due — Fortinet DESCRIPTION:Fortinet FortiMail Path Traversal Vulnerability. EVULNABLE Risk : 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-104286 END:VEVENT BEGIN:VEVENT UID:CVE-2026-76504-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261003 SUMMARY:CVE-2026-76504 remediation due — Cisco DESCRIPTION:Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability. EVULN ABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-76504 END:VEVENT BEGIN:VEVENT UID:CVE-2026-76519-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261017 SUMMARY:CVE-2026-76519 remediation due — Cisco DESCRIPTION:Cisco Secure Email Gateway Relative Path Traversal Vulnerabilit y. EVULNABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-76519 END:VEVENT BEGIN:VEVENT UID:CVE-2026-106931-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261023 SUMMARY:CVE-2026-106931 remediation due — EG Secure Solutions DESCRIPTION:EG Secure Solutions SiteGuard Server Edition OS Command Injecti on Vulnerability. EVULNABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-106931 END:VEVENT BEGIN:VEVENT UID:CVE-2026-88772-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20260930 SUMMARY:CVE-2026-88772 remediation due — Citrix DESCRIPTION:Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability. EVULNABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-88772 END:VEVENT BEGIN:VEVENT UID:CVE-2026-102489-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261005 SUMMARY:CVE-2026-102489 remediation due — Zammad GmbH DESCRIPTION:Zammad GmbH Zammad Session Fixation Vulnerability. EVULNABLE Ri sk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-102489 END:VEVENT BEGIN:VEVENT UID:CVE-2026-86950-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261013 SUMMARY:CVE-2026-86950 remediation due — Apple DESCRIPTION:Apple Multiple Products Out-of-Bounds Write Vulnerability. EVUL NABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-86950 END:VEVENT BEGIN:VEVENT UID:CVE-2026-0322-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261017 SUMMARY:CVE-2026-0322 remediation due — Palo Alto Networks DESCRIPTION:Palo Alto Networks PAN-OS Code Injection Vulnerability. EVULNAB LE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-0322 END:VEVENT BEGIN:VEVENT UID:CVE-2026-102764-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261019 SUMMARY:CVE-2026-102764 remediation due — BeyondTrust DESCRIPTION:BeyondTrust Remote Support Authentication Bypass by Spoofing Vu lnerability. EVULNABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-102764 END:VEVENT BEGIN:VEVENT UID:CVE-2026-88771-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20260930 SUMMARY:CVE-2026-88771 remediation due — Citrix DESCRIPTION:Citrix NetScaler Improper Input Validation Vulnerability. EVULN ABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-88771 END:VEVENT BEGIN:VEVENT UID:CVE-2025-61624-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261019 SUMMARY:CVE-2025-61624 remediation due — Fortinet DESCRIPTION:Fortinet Multiple Products Path Traversal Vulnerability. EVULNA BLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2025-61624 END:VEVENT BEGIN:VEVENT UID:CVE-2026-93952-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20260925 SUMMARY:CVE-2026-93952 remediation due — Arista DESCRIPTION:Arista VeloCloud Orchestrator Improper Input Validation Vulnera bility. EVULNABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-93952 END:VEVENT BEGIN:VEVENT UID:CVE-2026-67279-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20260928 SUMMARY:CVE-2026-67279 remediation due — MikroTik DESCRIPTION:Mikrotik RouterOS Improper Enforcement of Behavioral Workflow V ulnerability. EVULNABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-67279 END:VEVENT BEGIN:VEVENT UID:CVE-2026-105133-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261017 SUMMARY:CVE-2026-105133 remediation due — Ahsay DESCRIPTION:Ahsay AhsayCBS Improper Authentication Vulnerability. EVULNABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-105133 END:VEVENT BEGIN:VEVENT UID:CVE-2026-96656-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261023 SUMMARY:CVE-2026-96656 remediation due — Plex DESCRIPTION:Plex Media Server External Control of File Name or Path Vulnera bility. EVULNABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-96656 END:VEVENT BEGIN:VEVENT UID:CVE-2026-88779-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261007 SUMMARY:CVE-2026-88779 remediation due — Citrix DESCRIPTION:Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability. EVULNABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-88779 END:VEVENT BEGIN:VEVENT UID:CVE-2026-5430-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20260927 SUMMARY:CVE-2026-5430 remediation due — WSO2 DESCRIPTION:WSO2 Multiple Products Path Traversal Vulnerability. EVULNABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-5430 END:VEVENT BEGIN:VEVENT UID:CVE-2026-102490-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261005 SUMMARY:CVE-2026-102490 remediation due — Zammad GmbH DESCRIPTION:Zammad GmbH Zammad Improper Privilege Management Vulnerability. EVULNABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-102490 END:VEVENT BEGIN:VEVENT UID:CVE-2026-96654-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261023 SUMMARY:CVE-2026-96654 remediation due — Plex DESCRIPTION:Plex Media Server Improper Neutralization of Encoded URI Scheme s in a Web Page Vulnerability. EVULNABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-96654 END:VEVENT BEGIN:VEVENT UID:CVE-2026-96652-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261103 SUMMARY:CVE-2026-96652 remediation due — Plex DESCRIPTION:Plex Media Server Server-Side Request Forgery (SSRF) Vulnerabil ity. EVULNABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-96652 END:VEVENT BEGIN:VEVENT UID:CVE-2026-96655-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261103 SUMMARY:CVE-2026-96655 remediation due — Plex DESCRIPTION:Plex Media Server Server-Side Request Forgery (SSRF) Vulnerabil ity. EVULNABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-96655 END:VEVENT BEGIN:VEVENT UID:CVE-2026-110936-kev-due@evulnable.com DTSTAMP:20261022T104509Z DTSTART;VALUE=DATE:20261103 SUMMARY:CVE-2026-110936 remediation due — Siemens DESCRIPTION:Siemens Software Center Uncontrolled Search Path Element Vulner ability. EVULNABLE Risk: 75 (Urgent). URL:https://evulnable.com/vulnerability-management/cve/CVE-2026-110936 END:VEVENT END:VCALENDAR