Cyber ·
CISA adds two Ivanti Connect Secure flaws to the KEV catalog
CISA added two Ivanti Connect Secure flaws to the KEV catalog based on active exploitation evidence: one involving missing authentication and one involving predictable identifiers.
CISA reported that it added two vulnerabilities to the Known Exploited Vulnerabilities (KEV) catalog, both in Ivanti Connect Secure and based on evidence of active exploitation: CVE-2026-111357, a missing authentication flaw for a critical function, and CVE-2026-118527, a flaw in generating predictable numbers or identifiers. The agency states that these vulnerability types are a frequent attack vector for malicious actors.
The notice also summarizes Binding Operational Directive (BOD) 26-04, which directs Federal Civilian Executive Branch (FCEB) agencies to prioritize fixing KEV flaws on publicly exposed assets that grant full control after exploitation, and to check for signs of compromise before patching. CISA encourages all organizations to adopt risk-based vulnerability management. To consult the source, use CISA's original alert dated 30/10/2026 and check the CVE identifiers in the official database.
Original source: CISA adiciona duas vulnerabilidades exploradas conhecidas ao catálogo