[Stanley]

CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively Exploit

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
The vulnerability list is as follows -

CVE-2021-22054 (CVSS score: 7.5) - A server-side request forgery (SSRF) vulnerability in Omnissa Workspace One UEM (formerly VMware Workspace One UEM) that

https://thehackernews.com/2026/03/cisa-f...i-and.html

[shakur123]

When Cybersecurity and Infrastructure Security Agency adds something to KEV, it’s already being weaponized—this is not theoretical risk.

SolarWinds, Ivanti, and Workspace One flaws showing active exploitation = exposed infra, slow patch cycles, and attackers capitalizing fast.

If it’s public + KEV-listed, assume compromise until proven otherwise.