Security issue reported in Enterprise

What happened

• Mandatory remediation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.Remediation Deadline: 2026-06-21

Contributing factors stated by the source

• Actively exploited in production systems pursuant to CISA Binding Operational Directive BOD 22-01
• Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

The failure pattern

Related standards

CollectSEA's mapping through this incident's failure pattern; not an official determination by the standards bodies.

• CP-9 System Backup
• CP-10 System Recovery and Reconstitution
• RV.3.4 Update the development process
• MANAGE 4.3 Track and communicate incidents and errors

Incidents with the same pattern