The Cybersecurity and Infrastructure Security Agency (CISA) has released a comprehensive assessment detailing persistent vulnerabilities and systemic challenges within U.S. election infrastructure. The report, dated July 13, 2026, compiles data from direct software examinations, network penetration testing, and incident response operations conducted at the request of state, local, tribal, and territorial entities.

Election Security Risks

According to the federal agency, while election-related software contains security flaws common to all complex software, the ability to fix these flaws is severely restricted by current regulatory frameworks. CISA noted that structural constraints within the government certification ecosystem significantly limit how quickly private vendors can patch their products.

The assessment also highlighted widespread cybersecurity weaknesses in the local networks that host these voting systems. CISA attributed these vulnerabilities to weak identity management, a lack of multi-factor authentication enforcement, and insufficient network traffic monitoring.

Recommendations

To mitigate these overlapping risks, CISA outlined several technical and policy recommendations. Chief among them is the modernization of certification rules to allow election officials to apply critical security patches in real-time without voiding their official certification status.

The agency also urged the universal adoption of human-readable paper ballots, regular manual post-election audits to verify machine counts before results are certified, and stricter requirements for software vendors.

Original reporting: Tampa Free Press — read the source article.