CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability CVE-2026-97229 GitLab Community Edition and Enterprise Edition…
Sources
- T1CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA advisories & alerts
Vulnerabilities
Why this score
| Signal | Points |
|---|---|
| kev added | 50 |
| kev short fuse — 3 days to remediate | 15 |
| ssvc active | 35 |
| cvss critical — 10 | 20 |
| epss high | 20 |
| public poc — 5 repositories | 20 |
| widely deployed | 15 |