CISA Adds Two Known Exploited Vulnerabilities to Catalog

Two critical vulnerabilities — a Microsoft Windows Command Injection flaw and an Ivanti Connect Secure Authentication Bypass — have been added to CISA's Known Exploited Vulnerabilities Catalog due to confirmed active exploitation in the wild. The root cause lies in delayed or absent patch management practices, where organizations fail to remediate publicly known vulnerabilities before threat actors can weaponize them. Authentication bypass vulnerabilities in remote access products like Ivanti are especially dangerous as they can grant attackers unauthenticated entry into corporate networks. The addition to the KEV Catalog under Binding Operational Directive 26-04 underscores that federal agencies — and by extension all organizations — must treat actively exploited vulnerabilities as emergency remediation priorities, not routine maintenance items.