CISA Adds Two Known Exploited Vulnerabilities to Catalog
Summary
CISA has added two new vulnerabilities, CVE-2026-111357 and CVE-2026-118527, related to Ivanti Connect Secure to its Known Exploited Vulnerabilities (KEV) Catalog due to evidence of active exploitation. These additions reinforce the importance of CISA's Binding Operational Directive (BOD) 26-04, which mandates federal agencies to prioritize the remediation of high-risk vulnerabilities listed in the KEV Catalog.
IFF Assessment
The addition of known exploited vulnerabilities to CISA's KEV catalog indicates active threats that defenders must address, posing a risk to systems.
Severity
CISA KEV: Listed as actively exploited. Federal patch due: November 02, 2026. Known ransomware use: Unknown.
Defender Context
Defenders should monitor CISA's KEV Catalog for newly added vulnerabilities and prioritize patching or mitigating any listed vulnerabilities within their environments, especially on publicly exposed assets. Active exploitation of these Ivanti Connect Secure flaws suggests a need for immediate review and remediation to prevent compromise.