U.S. CISA adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog
2026-10-14T02:51:37Z•c261fa71fa03e75cfd28f791c3b2fe1d3327d0431a094dbf6e2419f0de032154
CVE-2026-102255CVE-2026-104935CVE-2026-97229AI-enabled attacksCISA KEVDDoSFortiMailGitLabIoT securityIvanti Connect SecureSSRFSonicWall SMA 1000active exploitationauthentication bypassbotnetscritical vulnerabilitycybercrimedata theftindustrial control systemsransomwareremote code executionretail
What happened
Security Affairs RSS aggregation covering actively exploited vulnerabilities, critical vendor patches, cyberattacks, AI-enabled threats, ransomware investigations, and DDoS incidents. Notable items include CISA adding an Ivanti Connect Secure/FortiMail authentication-bypass flaw to the KEV catalog, a critical unauthenticated GitLab remote-code-execution vulnerability, and active exploitation of a CVSS 10.0 SonicWall SMA 1000 SSRF flaw. The feed also reports attacks affecting refrigeration systems, data theft attributed to AI-assisted CyberXero operations, and disruption of Canonical websites.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- c261fa71fa03e75cfd28f791c3b2fe1d3327d0431a094dbf6e2419f0de032154
- Enrichment time
- 2026-10-14T02:51:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.