U.S. CISA adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog
2026-10-13T20:51:37Z•bcce86b92644a79127d1d5ddd6f687f346414a06897ac568d08b6e258141a370
CVE-2026-102255CVE-2026-104935CVE-2026-97229AI-assisted-attacksCISA-KEVDDoSFortiMailGitLabIoTIvanti-Connect-SecureOT-securitySSRFSonicWall-SMA-1000active-exploitationauthentication-bypasscriticalcybercrimedata-breachransomwareremote-code-executionvulnerability
What happened
Security Affairs RSS aggregation covering actively exploited and critical vulnerabilities in Ivanti Connect Secure/FortiMail, GitLab, and SonicWall SMA 1000; attacks against refrigeration systems and Canonical infrastructure; AI-assisted cyber operations; ransomware-related law enforcement activity; and data theft. The highest-priority items are the unauthenticated GitLab remote-code-execution flaw CVE-2026-97229 (CVSS 10.0), SonicWall SMA 1000 SSRF flaw CVE-2026-102255 (CVSS 10.0) under active exploitation, and Ivanti Connect Secure/FortiMail authentication bypass CVE-2026-104935 (CVSS 8.6)،؟
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- bcce86b92644a79127d1d5ddd6f687f346414a06897ac568d08b6e258141a370
- Enrichment time
- 2026-10-13T20:51:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.