CISA Issues KEV Alert for Microsoft Windows and Ivanti Vulnerabilities Under Active Attack
CISA added two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation in the wild. CVE-2026-96951 affects Microsoft Windows systems through command injection flaws, while CVE-2026-104935 targets Ivanti Connect Secure appliances via authentication bypass through spoofing mechanisms. These vulnerabilities are being actively exploited by threat actors to gain initial access and establish persistence in enterprise environments, posing significant risks to federal and private sector organizations. This incident highlights the ongoing trend of attackers targeting network infrastructure and authentication systems to bypass perimeter defenses. With the rise of sophisticated threat actors exploiting zero-day and recently disclosed vulnerabilities at an accelerated pace, organizations face increasing pressure to implement rapid patch management and zero-trust security models.
Kill Chain
