BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Patch Sonar//CISA patch deadlines//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:Patch Sonar deadlines: Remote access & IT tools
X-WR-CALDESC:Federal fix deadlines for actively exploited vulnerabilities\,
  from CISA's KEV catalog. patchsonar.com
REFRESH-INTERVAL;VALUE=DURATION:PT6H
X-PUBLISHED-TTL:PT6H
BEGIN:VEVENT
UID:CVE-2026-102764@patchsonar.com
DTSTAMP:20261016T000000Z
DTSTART;VALUE=DATE:20261019
DTEND;VALUE=DATE:20261020
SUMMARY:Patch deadline: BeyondTrust Remote Support (CVE-2026-102764)
DESCRIPTION:BeyondTrust Remote Support Authentication Bypass by Spoofing Vu
 lnerability\n\nBeyondTrust Remote Support contains an authentication bypas
 s by spoofing vulnerability that could allow a remote attacker to perform 
 file operations on the appliance.\n\nCISA's required action: Apply mitigat
 ions in accordance with vendor instructions\, ensuring compliance with CIS
 A’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in No
 tes) guidance and CISA’s “Forensics Triage Requirements” (see URL in
  Notes). Follow applicable BOD 26-04 guidance for cloud services or discon
 tinue use of the product if mitigations are unavailable. Stakeholders are 
 responsible for evaluating each asset's internet exposure and ensuring adh
 erence to BOD 26-04 patching guidelines.\n\nListed by CISA on 2026-10-16. 
 More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-102764
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-84869@patchsonar.com
DTSTAMP:20260911T000000Z
DTSTART;VALUE=DATE:20260914
DTEND;VALUE=DATE:20260915
SUMMARY:Patch deadline: ConnectWise ScreenConnect (CVE-2026-84869)
DESCRIPTION:ConnectWise ScreenConnect Improper Privilege Management and Mis
 sing Authorization Vulnerability\n\nConnectWise ScreenConnect contains bot
 h an improper privilege management and missing authorization vulnerability
  that may allow an attacker to transfer and execute files through an activ
 e remote session without authorization or host confirmation.\n\nCISA's req
 uired action: Apply mitigations in accordance with vendor instructions\, e
 nsuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates B
 ased on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage 
 Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance f
 or cloud services or discontinue use of the product if mitigations are una
 vailable. Stakeholders are responsible for evaluating each asset's interne
 t exposure and ensuring adherence to BOD 26-04 patching guidelines.\n\nLis
 ted by CISA on 2026-09-11. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-84869
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-86218@patchsonar.com
DTSTAMP:20260908T000000Z
DTSTART;VALUE=DATE:20260911
DTEND;VALUE=DATE:20260912
SUMMARY:Patch deadline: N-able N-central (CVE-2026-86218)
DESCRIPTION:N-able N-central Static Code Injection Vulnerability\n\nN-able 
 N-central contains a static code injection vulnerability that could allow 
 for pre-authentication remote code execution.\n\nCISA's required action: A
 pply mitigations in accordance with vendor instructions\, ensuring complia
 nce with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (s
 ee URL in Notes) guidance and CISA’s “Forensics Triage Requirements”
  (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud servic
 es or discontinue use of the product if mitigations are unavailable. Stake
 holders are responsible for evaluating each asset's internet exposure and 
 ensuring adherence to BOD 26-04 patching guidelines.\n\nListed by CISA on 
 2026-09-08. More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-86218
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-18556@patchsonar.com
DTSTAMP:20260804T000000Z
DTSTART;VALUE=DATE:20260807
DTEND;VALUE=DATE:20260808
SUMMARY:Patch deadline: N-able N-central (CVE-2026-18556)
DESCRIPTION:N-able N-central Authentication Bypass Using an Alternate Path 
 or Channel Vulnerability\n\nN-able N-central contains an authentication by
 pass using an alternate path or channel that allows for authentication byp
 ass.\n\nCISA's required action: Apply mitigations in accordance with vendo
 r instructions\, ensuring compliance with CISA’s BOD 26-04 Prioritizing 
 Security Updates Based on Risk (see URL in Notes) guidance and CISA’s 
 “Forensics Triage Requirements” (see URL in Notes). Follow applicable 
 BOD 26-04 guidance for cloud services or discontinue use of the product if
  mitigations are unavailable. Stakeholders are responsible for evaluating 
 each asset's internet exposure and ensuring adherence to BOD 26-04 patchin
 g guidelines.\n\nListed by CISA on 2026-08-04. More: https://patchsonar.co
 m/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-18556
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:CVE-2026-18577@patchsonar.com
DTSTAMP:20260803T000000Z
DTSTART;VALUE=DATE:20260806
DTEND;VALUE=DATE:20260807
SUMMARY:Patch deadline: N-able N-central (CVE-2026-18577)
DESCRIPTION:N-able N-central Authentication Bypass Using an Alternate Path 
 or Channel Vulnerability\n\nN-able N-central contains an authentication by
 pass using an alternate path or channel allows for authentication bypass a
 nd account takeover in N-central. This vulnerability is the result of an i
 ncomplete patch for CVE-2026-18556.\n\nCISA's required action: Apply mitig
 ations in accordance with vendor instructions\, ensuring compliance with C
 ISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in 
 Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL 
 in Notes). Follow applicable BOD 26-04 guidance for cloud services or disc
 ontinue use of the product if mitigations are unavailable. Stakeholders ar
 e responsible for evaluating each asset's internet exposure and ensuring a
 dherence to BOD 26-04 patching guidelines.\n\nListed by CISA on 2026-08-03
 . More: https://patchsonar.com/
URL:https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api
 _fulltext=CVE-2026-18577
TRANSP:TRANSPARENT
END:VEVENT
END:VCALENDAR