VulnerabilitycriticalExploited in the wild

CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively Exploited

The Hacker Newsby @TheHackersNewsMar 11, 2026 · 07:17 UTC (Mar 11, 2026)2 min read

Read at thehackernews.com

Analyze CVE-2021-22054 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-22054 CVE-2025-26399 CVE-2026-1603

Tags: cve-2021-22054 cve-2025-26399 cve-2026-1603 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-22054	Unauthenticated SSRF in VMware (Omnissa) Workspace ONE UEM Console	7.5	100%	KEV	Dec 17, 2021 KEV Mar 9, 2026
CVE-2025-26399	Unauthenticated Deserialization RCE in SolarWinds Web Help Desk	9.8	91%	KEVRansomware	Sep 23, 2025 KEV Mar 9, 2026
CVE-2026-1603	Authentication Bypass in Ivanti Endpoint Manager Leaks Stored Credentials	7.5	88%	KEV	Feb 10, 2026 KEV Mar 9, 2026

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Mar 10, 2026 Vulnerability / Enterprise Security The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added three security flaws to its Known Exploited Vulnerabilities ( KEV ) catalog, based on evidence of active exploitation.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.