• CISA to Sunset Weekly Vulnerability Bulletin on September 28, 2026

    From CISA@cisa@messages.cisa.gov to cisa@toolazy.synchro.net on Wed Sep 16 17:04:34 2026
    --===============3280871879677042714==
    Content-Type: multipart/alternative; boundary="===============6194630937843265097=="
    MIME-Version: 1.0

    --===============6194630937843265097==
    Content-Type: text/plain; charset="utf-8"
    MIME-Version: 1.0
    Content-Transfer-Encoding: quoted-printable

    Cybersecurity and Infrastructure Security Agency (CISA)

    You are subscribed to Vulnerability Bulletins for Cybersecurity and Infrast= ructure Security Agency. This information has recently been updated and is = now available.

    CISA to Sunset Weekly Vulnerability Bulletin on September 28, 2026 09/16/20=
    26 1:00 PM EST=20

    On September 28, CISA will discontinue the weekly Vulnerability Bulletin as=
    part of its shift from severity=E2=80=91based vulnerability management to =
    a modern, risk=E2=80=91based approach. This change aligns with Binding Oper= ational Directive (BOD) 26=E2=80=9104 [ https://www.cisa.gov/news-events/di= rectives/bod-26-04-prioritizing-security-updates-based-risk ], which direct=
    s federal agencies to prioritize vulnerabilities based on real=E2=80=91worl=
    d risk factors, including evidence of exploitation and exposure, rather tha=
    n severity scores alone.

    CISA will continue to provide risk-focused vulnerability information throug=
    h:


    * CISA's Known Exploited Vulnerabilities (KEV) Catalog [ https://www.cisa= .gov/known-exploited-vulnerabilities-catalog ]=20
    * CISA Cybersecurity Alerts and Advisories [ https://www.cisa.gov/news-ev= ents/cybersecurity-advisories ]=20
    * CVE: Common Vulnerabilities and Exposures [ https://www.cve.org/ ]=20


    Current Vulnerability Bulletin email subscribers should update their GovDel= ivery/Granicus preferences by selecting *Known Exploited Vulnerabilities Ca= talog* and *Cybersecurity Advisories* subscription topics to continue recei= ving related updates.

    CISA also encourages organizations to consult vendor and provider advisorie=
    s directly, as appropriate, to support their internal vulnerability managem= ent processes.

    This change only affects current Vulnerability Bulletin email subscribers, = along with security teams, critical infrastructure owners and operators, st= ate, local, tribal, and territorial partners, and other stakeholders that h= ave relied on weekly CVSS=E2=80=91based summaries. CISA remains committed t=
    o strengthening national cyber defense and helping organizations prioritize=
    remediation based on real-world risk.

    body { font-size: 1em; font-family: Arial, Verdana, sans-serif; font-weight=
    : normal; font-style: normal; color: #333333; }=20

    Having trouble viewing this message?=C2=A0View it as a webpage [ https://co= ntent.govdelivery.com/accounts/USDHSCISA/bulletins/42b055b ].=C2=A0 [ https= ://content.govdelivery.com/accounts/USDHS/bulletins/292141e ]

    You are subscribed to updates from the Cybersecurity and Infrastructure Sec= urity Agency [ https://www.cisa.gov ] (CISA)
    Manage Subscriptions [ https://public.govdelivery.com/accounts/USDHSCISA/su= bscriber/edit?preferences=3Dtrue#tab1 ]=C2=A0=C2=A0|=C2=A0=C2=A0Privacy Pol= icy [ https://www.cisa.gov/privacy-policy ]=C2=A0=C2=A0|=C2=A0 Help [ https= ://subscriberhelp.granicus.com/s/article/Subscriber-Help-Center ] [ https:/= /insights.govdelivery.com/Communications/Subscriber_Help_Center ]

    Connect with CISA:=20
    Facebook [ https://www.facebook.com/CISA ]=C2=A0 |=C2=A0 Twitter [ https://= twitter.com/CISAgov ]=C2=A0 |=C2=A0 Instagram [ https://Instagram.com/cisag=
    ov ]=C2=A0 |=C2=A0 LinkedIn [ https://www.linkedin.com/company/cybersecurit= y-and-infrastructure-security-agency ]=C2=A0 |=C2=A0=C2=A0 YouTube [ https:= //www.youtube.com/channel/UCxyq9roe-npgzrVwbpoAy0A ]

    ________________________________________________________________________


    This email was sent to cisa@toolazy.synchro.net using Granicus Communicatio=
    ns Cloud, on behalf of: Cybersecurity and Infrastructure Security Agency = =C2=B7 707 17th St, Suite 4000 =C2=B7 Denver, CO 80202 Granicus Communicati= ons logo [ https://granicus.com/solution/digital-communication-engagement/ = ]=20
    body .abe-column-block { min-height: 5px; } table.gd_combo_table img {margi= n-left:10px; margin-right:10px;} table.gd_combo_table div.govd_image_displa=
    y img, table.gd_combo_table td.gd_combo_image_cell img {margin-left:0px; ma= rgin-right:0px;}

    --===============6194630937843265097==
    Content-Type: text/html; charset="utf-8"
    MIME-Version: 1.0
    Content-Transfer-Encoding: quoted-printable

    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
    <html xmlns=3D"http://www.w3.org/1999/xhtml" xml:lang=3D"en" lang=3D"en"> <head>
    <title> CISA to Sunset Weekly Vulnerability Bulletin on September 28, 20=
    26
    </title>


    </head>
    <body style=3D"">

    <table width=3D"700" border=3D"0" cellspacing=3D"0" cellpadding=3D"0"=
    align=3D"center">
    <tr>
    <td>

    <!--[if (gte mso 9)|(IE)]>
    <table style=3D"display:none"><tr><td><a name=3D"gd_top" id=3D"gd_top"></= a></td></tr></table>
    <![endif]-->
    <a name=3D"gd_top" id=3D"gd_top"></a>

    =20



    <p><img src=3D"https://content.govdelivery.com/attachments/fancy_images/U= SDHSCISA/2020/06/3486054/05152023-gov-delivery-banner-copy_original.png" al= t=3D"Cybersecurity and Infrastructure Security Agency (CISA)" title=3D"" wi= dth=3D"600" height=3D"100"></p>
    <p>You are subscribed to Vulnerability Bulletins for Cybersecurity and In= frastructure Security Agency. This information has recently been updated an=
    d is now available.</p>
    <div class=3D"rss_item" style=3D"margin-bottom: 2em;">
    <div class=3D"rss_title" style=3D"font-weight: bold; font-size: 120%; margi=
    n: 0 0 0.3em; padding: 0;">CISA to Sunset Weekly Vulnerability Bulletin on = September 28, 2026</div>
    <div class=3D"rss_pub_date" style=3D"font-size: 90%; font-style: italic; co= lor: #666666; margin: 0 0 0.3em; padding: 0;">09/16/2026 1:00 PM EST</div>
    <div class=3D"l-page-section l-page-section--rich-text csaf-imported">

    <div class=3D"l-constrain">
    <div class=3D"l-page-section__content">
    <p>On September 28, CISA will discontinue the weekly Vulnerability Bulletin=
    as part of its shift from severity=E2=80=91based vulnerability management =
    to a modern, risk=E2=80=91based approach. This change aligns with <a href= =3D"https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-secu= rity-updates-based-risk" target=3D"_blank" title=3D"Binding Operational Dir= ective (BOD) 26=E2=80=9104" rel=3D"noopener">Binding Operational Directive = (BOD) 26=E2=80=9104</a>, which directs federal agencies to prioritize vulne= rabilities based on real=E2=80=91world risk factors, including evidence of = exploitation and exposure, rather than severity scores alone.</p>
    <p>CISA will continue to provide risk-focused vulnerability information thr= ough:</p>

    <li><a href=3D"https://www.cisa.gov/known-exploited-vulnerabilities-catalog=
    " target=3D"_blank" title=3D"CISA's Known Exploited Vulnerabilities (KEV) C= atalog" rel=3D"noopener">CISA's Known Exploited Vulnerabilities (KEV) Catal= og</a></li>
    <li><a href=3D"https://www.cisa.gov/news-events/cybersecurity-advisories" t= arget=3D"_blank" title=3D"CISA Cybersecurity Alerts and Advisories" rel=3D"= noopener">CISA Cybersecurity Alerts and Advisories</a></li>
    <li><a href=3D"https://www.cve.org/" target=3D"_blank" title=3D"CVE: Common=
    Vulnerabilities and Exposures" rel=3D"noopener">CVE: Common Vulnerabilitie=
    s and Exposures</a></li>
    </ul>
    <p>Current Vulnerability Bulletin email subscribers should update their Gov= Delivery/Granicus preferences by selecting <strong>Known Exploited Vulnerab= ilities Catalog</strong> and <strong>Cybersecurity Advisories</strong> subs= cription topics to continue receiving related updates.</p>
    <p>CISA also encourages organizations to consult vendor and provider adviso= ries directly, as appropriate, to support their internal vulnerability mana= gement processes.</p>
    <p>This change only affects current Vulnerability Bulletin email subscriber=
    s, along with security teams, critical infrastructure owners and operators,=
    state, local, tribal, and territorial partners, and other stakeholders tha=
    t have relied on weekly CVSS=E2=80=91based summaries. CISA remains committe=
    d to strengthening national cyber defense and helping organizations priorit= ize remediation based on real-world risk.</p>
    </div>
    </div>
    </div>
    </div>
    <style>body {
    font-size: 1em; font-family: Arial, Verdana, sans-serif; font-weight: norma=
    l; font-style: normal; color: #333333;
    }
    </style>
    =20


    <div id=3D"mail_footer">
    <p style=3D"text-align: center;"><span style=3D"font-size: 10.0pt; colo=
    r: #757575;">Having trouble viewing this message?=C2=A0</span><a href=3D"ht= tps://content.govdelivery.com/accounts/USDHSCISA/bulletins/42b055b" target= =3D"_blank" rel=3D"noopener">View it as a webpage</a>.=C2=A0<a href=3D"http= s://content.govdelivery.com/accounts/USDHS/bulletins/292141e" target=3D"_bl= ank" rel=3D"noopener"></a><span style=3D"font-size: 10.0pt; color: #757575;= "></span></p>
    <p style=3D"text-align: center;"><span style=3D"font-size: 10.0pt; color: #= 757575;">You are subscribed to updates from the </span><a href=3D"https://w= ww.cisa.gov"><span style=3D"font-size: 10.0pt;">Cybersecurity and Infrastru= cture Security Agency</span></a><span style=3D"font-size: 10.0pt; color: #7= 57575;"> (CISA)<br></span><a href=3D"https://public.govdelivery.com/account= s/USDHSCISA/subscriber/edit?preferences=3Dtrue#tab1" target=3D"_blank" rel= =3D"noopener"><span style=3D"font-size: 10.0pt; color: #00568c;">Manage Sub= scriptions</span></a>=C2=A0=C2=A0<span style=3D"font-size: 10.0pt; color: #= 757575;">|=C2=A0=C2=A0</span><a href=3D"https://www.cisa.gov/privacy-policy=
    " target=3D"_blank" rel=3D"noopener"><span style=3D"font-size: 10.0pt; colo=
    r: #00568c;">Privacy Policy</span></a><span style=3D"font-size: 10.0pt; col= or: #757575;">=C2=A0=C2=A0|=C2=A0 <a href=3D"https://subscriberhelp.granicu= s.com/s/article/Subscriber-Help-Center" target=3D"_blank" rel=3D"noopener">= Help</a><a href=3D"https://insights.govdelivery.com/Communications/Subscrib= er_Help_Center" target=3D"_blank" rel=3D"noopener"></a></span><span style= =3D"font-size: 10.0pt; color: #757575;"></span></p>
    <p style=3D"text-align: center;"><span style=3D"font-size: 10.0pt; color: #= 757575;">Connect with CISA: <br></span><a href=3D"https://www.facebook.com/= CISA" target=3D"_blank" rel=3D"noopener"><span style=3D"font-size: 10.0pt; = color: #00568c;">Facebook</span></a><span style=3D"font-size: 10.0pt; color=
    : #757575;">=C2=A0 |=C2=A0 </span><a href=3D"https://twitter.com/CISAgov" t= arget=3D"_blank" rel=3D"noopener"><span style=3D"font-size: 10.0pt; color: = #00568c;">Twitter</span></a><span style=3D"font-size: 10.0pt; color: #75757= 5;">=C2=A0 |=C2=A0 </span><a href=3D"https://Instagram.com/cisagov" target= =3D"_blank" rel=3D"noopener"><span style=3D"font-size: 10.0pt; color: #0056= 8c;">Instagram</span></a><span style=3D"font-size: 10.0pt; color: #757575;"= >=C2=A0 |=C2=A0 </span><a href=3D"https://www.linkedin.com/company/cybersec= urity-and-infrastructure-security-agency" target=3D"_blank" rel=3D"noopener= "><span style=3D"font-size: 10.0pt; color: #00568c;">LinkedIn</span></a><sp=
    an style=3D"font-size: 10.0pt; color: #757575;">=C2=A0 |=C2=A0=C2=A0 </span= ><a href=3D"https://www.youtube.com/channel/UCxyq9roe-npgzrVwbpoAy0A" targe= t=3D"_self"><span style=3D"font-size: 10.0pt; color: #00568c;">YouTube</spa= n></a><span style=3D"font-size: 10.0pt; color: #757575;"></span></p>

    </div>
    <div id=3D"tagline">
    <hr>
    <table style=3D"width: 100%;" border=3D"0" cellspacing=3D"0" cellpadding=3D=

    <tbody>

    <td style=3D"color: #757575; font-size: 10px; font-family: Arial;" width=3D= "89%">This email was sent to cisa@toolazy.synchro.net using Granicus Commun= ications Cloud, on behalf of: Cybersecurity and Infrastructure Security Age= ncy =C2=B7 707 17th St, Suite 4000 =C2=B7 Denver, CO 80202</td>
    <td align=3D"right" width=3D"11%"><a href=3D"https://granicus.com/solution/= digital-communication-engagement/" target=3D"_blank" rel=3D"noopener"><img = src=3D"https://content.govdelivery.com/images/govd-logo-dark.png" border=3D= "0" alt=3D"Granicus Communications logo" width=3D"115"></a></td>

    </tr>
    </tbody>
    </table>
    <style type=3D"text/css">body .abe-column-block { min-height: 5px; } table.= gd_combo_table img {margin-left:10px; margin-right:10px;} table.gd_combo_ta= ble div.govd_image_display img, table.gd_combo_table td.gd_combo_image_cell=
    img {margin-left:0px; margin-right:0px;}</style>

    </div>
    </td>
    </tr>
    </table>

    <img alt=3D"" src=3D"https://links-2.govdelivery.com/CI0/010101a0ab2d67ff-f= 1113fdf-7adc-4e81-b7c9-2092b2926c92-000000/lNmE9E7chI0fuc8GDx3FbmuLsKyn3C-i= TYDZ7DAUVNY=3D452" style=3D"display: none; width: 1px; height: 1px;">
    </body>
    </html>

    --===============6194630937843265097==--

    --===============3280871879677042714==--