Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencieshttps://thehackernews.com/2026/10/flax-typhoon-exploits-five-flaws-as.html
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked threat actor known as Flax Typhoon. The vulnerabilities in question are listed below - CVE-2015-3306 (CVSS score: 10.0) - An improper access control vulnerability in ProFTPD that could allow