CISA Adds Two Known Exploited Vulnerabilities to Catalog
// AI summary
CISA added CVE-2026-111357 in Ivanti Connect Secure and CVE-2026-97229 in GitLab Community and Enterprise Edition to the KEV Catalog due to active exploitation.
// from the source
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability CVE-2026-97229 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operationa