+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively Exploit (/showthread.php?tid=6322190)
CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively Exploit - Stanley - Mar 17, 2026
CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively Exploit
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
The vulnerability list is as follows -
CVE-2021-22054 (CVSS score: 7.5) - A server-side request forgery (SSRF) vulnerability in Omnissa Workspace One UEM (formerly VMware Workspace One UEM) that
https://thehackernews.com/2026/03/cisa-flags-solarwinds-ivanti-and.html
RE: CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively Exploit - shakur123 - Mar 18, 2026
When Cybersecurity and Infrastructure Security Agency adds something to KEV, it’s already being weaponized—this is not theoretical risk.
SolarWinds, Ivanti, and Workspace One flaws showing active exploitation = exposed infra, slow patch cycles, and attackers capitalizing fast.
If it’s public + KEV-listed, assume compromise until proven otherwise.