VulnerabilitiesTwo Actively Exploited Flaws Added to CISA's Watch List, Including a Windows Zero-Day
A security-feature bypass in Windows Shell and an Ivanti authentication bypass are both being used in real attacks, and US federal agencies have until 16 October 2026 to fix them.
