CISA Adds 5 Vulnerabilities to Exploited List Amid China Cyber Espionage Concerns
CISA has expanded its Known Exploited Vulnerabilities (KEV) catalog by including five new entries, reflecting heightened concerns over cyber espionage activities tied to China-based threat actors.
Key Vulnerabilities Added to the KEV Catalog
The additions align with findings from Security Affairs, which detailed the involvement of Integrity Technology Group in exploiting these flaws. The vulnerabilities impact critical software components including ProFTPD (CVE-2015-3306), ONLYOFFICE Docs (CVE-2021-3199), Strapi (CVE-2023-22894), Apache Struts (CVE-2016-3081), and ISC BIND (CVE-2015-5477).
Risks Associated with the Vulnerabilities
Each of these flaws presents risks such as remote code execution, unauthorized file manipulation, and denial-of-service scenarios. Exploitation of these vulnerabilities has been associated with cyber espionage campaigns utilizing tools like Microscan and FishHub, which facilitate network reconnaissance, malware deployment, and data exfiltration.
Collaborative Advisory and Remediation Deadlines
A collaborative advisory from multiple jurisdictions highlights the dangers of integrating vulnerability scanning with active exploitation techniques. Federal agencies are required to address these issues by October 11, 2026, while private sector entities are encouraged to prioritize remediation.
According to a report by Security Affairs, the updated KEV list underscores the urgency of mitigating these exposures to prevent compromise of critical infrastructure and organizational systems.
About Author
English