CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog: CVE-2021-22054 (Omnissa Workspace ONE SSRF), CVE-2025-26399 (SolarWinds Web Help Desk deserialization), and CVE-2026-1603 (Ivanti EPM authentication bypass). These vulnerabilities pose significant risks to federal enterprises and require remediation under Binding Operational Directive 22-01, with CISA urging all organizations to prioritize patching.
Summary
CISA has added three actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog: CVE-2021-22054 (Omnissa Workspace ONE SSRF), CVE-2025-26399 (SolarWinds Web Help Desk deserialization), and CVE-2026-1603 (Ivanti EPM authentication bypass). These vulnerabilities pose significant risks to federal enterprises and require remediation under Binding Operational Directive 22-01, with CISA urging all organizations to prioritize patching.
Indicators of Compromise
- cve — CVE-2021-22054
- cve — CVE-2025-26399
- cve — CVE-2026-1603