CISA adds Microsoft Windows CVE-2026-96951 and Ivanti Connect Secure CVE-2026-104935 to KEV catalog over active exploitation
CISA added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2026-96951, a command injection flaw in Microsoft Windows, and CVE-2026-104935, an authentication bypass by spoofing in Ivanti Connect Secure. CISA describes these vulnerability types as a frequent attack vecto…