CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-96951 Microsoft Windows Command Injection Vulnerability CVE-2026-104935 Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal...
What happened
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-96951 Microsoft Windows Command Injection Vulnerability CVE-2026-104935 Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal...
Why it matters
The incident may affect operational continuity, asset safety or trust around Microsoft. Watch for verified scope and remediation.
Affected entities
View evidence
2 reports · 1 original report · 1 independent
- CISA Cybersecurity AdvisoriesPrimary source · Supports · EN · 100%CISA Adds Two Known Exploited Vulnerabilities to Catalog ↗
- CISA Cybersecurity AdvisoriesPrimary source · Supports · EN · 64%CISA Adds Four Known Exploited Vulnerabilities to Catalog ↗
Claims
- CISA Adds Two Known Exploited Vulnerabilities to Catalog Observed
Conflicts
No material conflict detected in the available evidence.
Timeline
- First reported
Market move following event
Market reaction is not yet available for this asset and time window.