CYBERSECURITYTRACKER
Permanent story citation

CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10250

As cited

Copy frozen at (site build).

vulnerabilities

CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records

The Cybersecurity and Infrastructure Security Agency (CISA) warned of a newly exploited vulnerability in Ivanti products, marking the sixth exploitation of an Ivanti bug in 2026. Microsoft's October patch day addressed over 1,400 vulnerabilities, including at least one rated as severe.

Why it matters: Organizations running Ivanti solutions and Microsoft products need to assess exposure to both the new Ivanti bug and Microsoft's latest patches, with CISA guidance available to prioritize remediation efforts.

VendorsMicrosoftIvanti
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary