CISA Adds Two Ivanti Connect Secure Vulnerabilities to Known Exploited Vulnerabilities Catalog

The Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities, CVE-2026-111357 and CVE-2026-118527, affecting Ivanti Connect Secure to its Known Exploited Vulnerabilities (KEV) Catalog. These vulnerabilities, related to missing authentication for critical functions and predictable number generation, are actively being exploited and pose significant risks, requiring federal agencies to prioritize rapid remediation.