CISA KEV: Week Adds Two Auth Bypasses and a WordPress RCE, SonicWall SSLVPN Newest

CISA added three exploited vulnerabilities to its Known Exploited Vulnerabilities catalog in the first week of November. Two of them, a SonicWall SSLVPN flaw and an Apple pointer-authentication bug, are authentication-controls bypasses; the third, a WordPress Core issue, is a TOCTOU race that lets unauthenticated attackers execute code during the upgrade window. The distinction matters more than any single entry, because the federal deadlines now on the calendar force patching of exactly the layer that cyber insurers price first.

Key Takeaways CISA added 3 exploited CVEs to KEV in the first week of November: SonicWall and Apple authentication bypasses plus a WordPress TOCTOU flaw enabling una…