CISA KEV this week: Cisco ASA, GitLab, Ivanti, PHP
Between 26 and 30 October 2026 CISA added actively exploited flaws in Cisco Secure Firewall ASA and FTD, GitLab CE/EE, Ivanti Connect Secure and PHP to its Known Exploited Vulnerabilities (KEV) catalog, with federal due dates from 29 October to 13 November. Network, VPN, DevOps and web server owners should patch now, whatever sector they are in.