The ‘Must-Patch’ List: CISA Adds Actively Exploited SolarWinds, Ivanti, and Omnissa Flaws to KEV

CISA has added three high-risk vulnerabilities to its Known Exploited Vulnerabilities catalog—an authentication-bypass SSRF in VMware/Omnissa Workspace ONE (CVE-2021-22054), a critical deserialization remote code execution in SolarWinds Web Help Desk (CVE-2025-26399, CVSS 9.8), and an Ivanti Endpoint Manager credential-leak authentication bypass (CVE-2026-1603, CVSS 8.6)—noting active exploitation and urging immediate patching under federal remediation directives.