CISA Adds One Known Exploited Vulnerability to Catalog
2026-11-05T23:24:02Z•bebc0cc4d234e5b315e22babcb2101c1ce13b17755fdbc465567fb674d7e1ed3
CVE-2024-27834CVE-2026-109618CVE-2026-109619CVE-2026-111357CVE-2026-111497CVE-2026-118527CVE-2026-119977CVE-2026-41709CVE-2026-46300CVE-2026-48356CVE-2026-76418CVE-2026-97229Adobe CommerceAppleBOD 26-04CISACisco ASACisco FTDGitLabGoogle BrotliIvanti Connect SecureKEVKnown Exploited VulnerabilitiesLinux KernelMagentoPHPVMware ESXiWordPressactive exploitationrapid patchingvulnerability management
What happened
CISA reports the addition of multiple vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. The entries affect Apple products, WordPress Core, Ivanti Connect Secure, GitLab, Cisco Secure Firewall/FTD, VMware ESXi, Linux Kernel, Adobe Commerce/Magento, Google Brotli, and PHP. CISA urges rapid remediation, prioritization of publicly exposed assets, and compromise assessment before patching, particularly under BOD 26-04 for U.S. federal civilian agencies.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- bebc0cc4d234e5b315e22babcb2101c1ce13b17755fdbc465567fb674d7e1ed3
- Enrichment time
- 2026-11-05T23:24:02Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.