According to The Hacker News, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws affecting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following confirmed active exploitation in the wild.
The agency identified vulnerabilities that include a missing authentication mechanism for a critical function. This flaw could allow unauthorized actors to perform actions without verification of identity or authorization. CISA noted that attackers have demonstrated the ability to chain multiple issues together.
Among the flaws referenced, one involves insufficient validation of input within a system component, enabling further interaction with internal processes under certain conditions. Another relates to improper access controls over an administrative interface, which may permit elevated privilege use when combined with other weaknesses.
CISA’s addition reflects observed real-world use by threat actors who linked the vulnerabilities in sequence to achieve deeper system impact. The catalog update aims to inform organizations about actively exploited issues requiring prompt assessment and remediation where applicable.
