Receive daily AI-curated summaries of engineering articles from top tech companies worldwide.

The Hacker News

|Security

CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV

2026-04-29

1 min read

by info@thehackernews.com (The Hacker News)

CISA added two actively exploited vulnerabilities to KEV.

•CVE-2024-1708: ConnectWise ScreenConnect path traversal (CVSS 8.4), fixed February 2024
•CVE-2026-32202: Windows Shell protection failure (CVSS 4.3), fixed April 2026
•CVE-2026-32202 from incomplete CVE-2026-21510 patch, exploited by APT28 as zero-day since December 2025
•CVE-2024-1708 chained with CVE-2024-1709 (CVSS 10.0) by Storm-1175 in Medusa ransomware attacks
•Federal agencies required to patch by May 12, 2026

This summary was automatically generated by AI based on the original article and may not be fully accurate.

Related Articles