CISA Ordina Patch Urgenti per SolarWinds, Ivanti, Workspace One
CISA ha aggiunto tre vulnerabilità al catalogo Known Exploited Vulnerabilities dopo evidenze di sfruttamento attivo. Le falle interessano SolarWinds Web Help Desk (CVE-2025-26399), Ivanti Endpoint Manager (CVE-2026-1603) e Omnissa/Workspace One UEM (CVE-2021-22054). Alle agenzie federali è stato imposto un termine accelerato: patch per SolarWinds entro una settimana e per Ivanti e Workspace One entro due settimane.
CVSS 10 CRITICAL: a vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco… EPSS 88% (100º percentile).
Data di correzione federale CISA 27 feb · data superata
CVSS 7.8 HIGH: a vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated… EPSS 12% (96º percentile), in aumento rispetto a 0.4%.
Data di correzione federale CISA 27 feb · data superata
CISA warns of actively exploited Ivanti EPM and Cisco SD-WAN flaws
Patched vulnerabilities in Ivanti Endpoint Manager and Cisco Catalyst SD-WAN are under attack, according to the US security agency, which added reporting requirements to its previous Cisco directive.
CISA shortens patch deadline for critical Ivanti, SolarWinds bugs
The Cybersecurity and Infrastructure Security Agency (CISA) gave all federal civilian agencies until Thursday to patch CVE-2025-26399 — a critical vulnerability impacting the popular SolarWinds Web Help Desk.