CISA shortens patch deadline for critical Ivanti, SolarWinds bugs

CISA has issued accelerated patching orders for three actively exploited vulnerabilities, including critical CVE-2025-26399 in SolarWinds Web Help Desk, after reports of exploitation by cybercriminals and nation-state actors; two additional flaws (including an Ivanti issue) were added to the Known Exploited Vulnerabilities catalog with shortened remediation deadlines due to evidence of in-the-wild abuse.