Skip to main content
Apexward Pulse
3 reportsPriority High

Cisco and Ivanti vulnerability disclosures

Two new vulnerabilities have been added to CISA's known-exploited catalogue, indicating active exploitation of systems using Cisco and Ivanti products.

First report Latest

What is going on

  • CISA added two vulnerabilities to its known-exploited catalogue based on evidence of active exploitation.
  • The vulnerabilities affect Cisco Secure Firewall ASA Software and Cisco Secure FTD Software, with CVE-2026-76418 and CVE-2026-97229 assigned.
  • A separate disclosure identified vulnerabilities in Ivanti Connect Secure, with CVE-2026-111357 and CVE-2026-118527 assigned.
  • CISA's additions suggest these vulnerabilities are being actively exploited in the wild.
  • Apple also released research on Secure Exclaves, detailing how sensor data is isolated from the main operating system.
  • What to watch: Further details on the exploitation methods and confirmation of whether these vulnerabilities have been used in targeted attacks against UK organisations.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed