BREACH WATCH BRIEF Critical ☁️ Vulnerability

CISA Adds Five Critical Flaws (ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, ISC BIND) to Known Exploited Vulnerabilities Catalog

CISA placed five high‑severity CVEs into its KEV catalog, linking them to China‑linked espionage activity. Organizations must treat these as priority remediation items to maintain audit‑ready vulnerability‑management evidence.

ADTP Breach Watch · October 11, 2026 · Security Affairs

SeverityCritical

Type☁️ Vulnerability

ConfidenceHigh

ReportedOct 11, 2026

Technology & SaaS Technology and SaaS providers using ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, or ISC BIND Vulnerability Exploit

What happened

The U.S. Cybersecurity and Infrastructure Security Agency added CVE‑2015‑3306, CVE‑2021‑3199, CVE‑2023‑22894, CVE‑2016‑3081, and CVE‑2015‑5477 to its Known Exploited Vulnerabilities catalog, citing active exploitation by actors tied to Integrity Technology Group.

Why it matters for trust and compliance

The addition underscores the necessity of a continuous vulnerability‑management control that provides real‑time evidence of patching and risk‑based prioritization, satisfying the vulnerability‑management objective across frameworks.
Enables organizations to map each CVE to a specific control objective and capture remediation evidence for auditors.
Supports continuous monitoring by ingesting CISA’s KEV feed into automated scanning pipelines.

Who is affected

Technology and SaaS providers using ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, or ISC BIND

Recommended actions

Inventory assets for the listed components, apply vendor patches or mitigations, and record remediation steps as control evidence.

Get the Breach Digest

The incidents that matter for your vendors and your data, analysed for practitioners, in one email.