CISA Adds One Known Exploited Vulnerability to Catalog
2026-11-03T21:24:02Z•c2cbf0f14ddbf2cb4432405376173a845273fd1e11071a12a9545ee82dbcd42e
CVE-2026-109618CVE-2026-109619CVE-2026-110447CVE-2026-111357CVE-2026-111497CVE-2026-118527CVE-2026-119977CVE-2026-41709CVE-2026-46300CVE-2026-48356CVE-2026-76418CVE-2026-97229Adobe CommerceBOD 26-04CISACisco ASACisco FTDCollabora OnlineGitLabGoogle BrotliIvanti Connect SecureKEVLinux KernelMagentoPHPVMware ESXiWordPressactive exploitationknown exploited vulnerabilitypatchingvulnerability management
What happened
CISA reports multiple additions to its Known Exploited Vulnerabilities (KEV) Catalog from October 26 through November 3, 2026, all based on evidence of active exploitation. Affected products include WordPress Core, Ivanti Connect Secure, GitLab, Cisco Secure Firewall/FTD, VMware ESXi, Linux Kernel, Adobe Commerce/Magento, Google Brotli, PHP, and Collabora Online. Organizations are urged to prioritize remediation, assess potentially compromised systems, and apply risk-based vulnerability management consistent with BOD 26-04.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- c2cbf0f14ddbf2cb4432405376173a845273fd1e11071a12a9545ee82dbcd42e
- Enrichment time
- 2026-11-03T21:24:02Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.