Skip to content

Back to the catalog

cisa.govadvisory

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA added two Ivanti Connect Secure vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog on 30 October 2026, citing evidence of active exploitation: CVE-2026-111357 (missing authentication for a critical function) and CVE-2026-118527 (generation of predictable numbers or identifiers). The alert restates BOD 26-04, which requires federal civilian agencies to remediate KEV-listed flaws on exposed assets and check for prior compromise. It also links the KEV nomination form.

TL;DR CISA lists two actively exploited Ivanti Connect Secure flaws in KEV and points federal agencies to BOD 26-04 remediation duties.
Open original ↗

Organisations named here

  • CISA

CVEs named here

  • CVE-2026-111357
  • CVE-2026-118527

Technologies named here

  • CISA KEV Nomination Form
  • Known Exploited Vulnerabilities Catalog
  • Ivanti Connect Secure
  • CISA KEV
  • VPN

Standards and laws named here

  • BOD 26-04

Techniques named here

  • Missing Authentication for Critical Function
  • Generation of Predictable Numbers or Identifiers

Concepts named here

  • Active exploitation
  • Binding Operational Directive 26-04: Prioritizing Security Updates Based on Risk
  • Federal Civilian Executive Branch (FCEB) agencies
  • Risk-based vulnerability management

Related in Threat Intel