CISA Adds Two Known Exploited Vulnerabilities to Catalog
2026-10-30T19:24:02Z•ca1b93cc02b94a9ceb655052046ce71a4f8b0a4e33beb667d51640a3eb7b7693
CVE-2026-109618CVE-2026-109619CVE-2026-110447CVE-2026-111357CVE-2026-111497CVE-2026-114625CVE-2026-118527CVE-2026-41709CVE-2026-46300CVE-2026-48356CVE-2026-76418CVE-2026-97229Adobe CommerceArista VeloCloudBOD 26-04CISACisco ASACisco FTDCollabora OnlineGitLabIvanti Connect SecureKEVKnown Exploited VulnerabilitiesLinux KernelMagentoOS command injectionPHPSQL injectionVMware ESXiactive exploitationrapid patchingvulnerability management
What happened
CISA advisories from October 23–30, 2026 report active exploitation of 11 vulnerabilities newly added to the Known Exploited Vulnerabilities Catalog. Affected products include Ivanti Connect Secure, GitLab, Cisco Secure Firewall/FTD, VMware ESXi, Linux kernel, Adobe Commerce/Magento, Google Brotli, PHP, Collabora Online, and Arista VeloCloud Orchestrator. Organizations are urged to prioritize rapid remediation, assess publicly exposed assets, and investigate possible compromise before patching, consistent with BOD 26-04 guidance for federal agencies.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ncas_current_activity
- Record identifier
- ca1b93cc02b94a9ceb655052046ce71a4f8b0a4e33beb667d51640a3eb7b7693
- Enrichment time
- 2026-10-30T19:24:02Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.