CISA BOD 26-04 three-day remediation directive
Public Sector Action
Summary
Hide ▲
Show ▼
CISA's BOD 26-04 requires federal agencies to apply available security updates or vendor-recommended mitigations within three days, accelerating remediation for actively exploited flaws. The directive increases pressure on agencies to reduce exposure across affected systems before attackers can expand access.
Related Happenings
Ubiquiti UniFi Connect, Talk, Access, Protect, and OS security patch release (multiple vulnerabilities)
Security Patch Release
H score45
First: 08.07.2026 17:38
Last: 08.07.2026 17:38
Sources 1
About this happening:
Ubiquiti shipped updates for UniFi Connect, UniFi Talk, UniFi Access, UniFi Protect, and UniFi OS, closing multiple critical vulnerabilities that could enable pr...
Ubiquiti UniFi Connect, Talk, Access, Protect, and OS security patch release (multiple vulnerabilities)
Security Patch ReleaseAbout this happening: Ubiquiti shipped updates for UniFi Connect, UniFi Talk, UniFi Access, UniFi Protect, and UniFi OS, closing multiple critical vulnerabilities that could enable pr...
CISA KEV order for FCEB agencies on LiteSpeed cPanel flaw
Public Sector Action
H score36
First: 16.06.2026 13:47
Last: 16.06.2026 13:47
Sources 1
About this happening:
CISA added the LiteSpeed cPanel user-end plugin flaw to KEV and ordered Federal Civilian Executive Branch agencies to secure systems within three days under ...
CISA KEV order for FCEB agencies on LiteSpeed cPanel flaw
Public Sector ActionAbout this happening: CISA added the LiteSpeed cPanel user-end plugin flaw to KEV and ordered Federal Civilian Executive Branch agencies to secure systems within three days under ...
CISA BOD 26-04 remediation requirements
Advisory/Mitigation
H score31
First: 11.06.2026 15:46
Last: 11.06.2026 15:46
Sources 1
About this happening:
CISA’s Binding Operational Directive 26-04 forces FCEB agencies to speed up remediation of high-risk vulnerabilities, with some deadlines as short as 3 days and new ...
CISA BOD 26-04 remediation requirements
Advisory/MitigationAbout this happening: CISA’s Binding Operational Directive 26-04 forces FCEB agencies to speed up remediation of high-risk vulnerabilities, with some deadlines as short as 3 days and new ...
CISA BOD 26-04 prioritizes vulnerability remediation for federal civilian agencies
Public Sector Action
H score27
First: 10.06.2026 15:00
Last: 10.06.2026 15:00
Sources 1
About this happening:
CISA issued Binding Operational Directive 26-04 to require federal civilian agencies to prioritize vulnerability remediation using Asset Exposure, KEV Status,...
CISA BOD 26-04 prioritizes vulnerability remediation for federal civilian agencies
Public Sector ActionAbout this happening: CISA issued Binding Operational Directive 26-04 to require federal civilian agencies to prioritize vulnerability remediation using Asset Exposure, KEV Status,...
CISA KEV remediation for Android and Linux vulnerabilities
Advisory/Mitigation
H score57
First: 03.06.2026 18:36
Last: 03.06.2026 18:36
Sources 1
About this happening:
CISA’s KEV update forced federal agencies to remediate CVE-2025-48595 and CVE-2022-0492 in Android and the Linux kernel before the June 5 deadline, or...
CISA KEV remediation for Android and Linux vulnerabilities
Advisory/MitigationAbout this happening: CISA’s KEV update forced federal agencies to remediate CVE-2025-48595 and CVE-2022-0492 in Android and the Linux kernel before the June 5 deadline, or...
Timeline
-
24.06.2026 17:35 2 articles · 21d ago
CISA orders federal agencies to remediate actively exploited Ubiquiti and Lantronix flaws in three days
Legal Policy Action UpdateCISA says hackers are actively exploiting flaws in Ubiquiti UniFi OS and Lantronix EDS5000 serial-to-ethernet servers, and BOD 26-04 gives federal agencies three days to apply available security updates or vendor-recommended mitigations for CVE-2026-34908, CVE-2026-34909, CVE-2026-34910, and CVE-2025-67038.
Show sources
- CISA warns of max severity Ubiquiti flaws exploited in attacks — www.bleepingcomputer.com — 24.06.2026 17:35
- CISA warns of max severity Ubiquiti flaws exploited in attacks — www.bleepingcomputer.com — 24.06.2026 17:35