CVE-2014-6278(gnu / bash)

- GNU — GNU Bash | Ivanti — Pulse Connect Secure | GitLab — Community and Enterprise Editions → CVE-2014-6278 → Evidence → Operational Risk Current State: DISCLOSED, ACTIVE_EXPLOITATION, KEV_ADDED, RANSOMWARE_USE Watch: - New infrastructure - Exploit reuse

NØX Echo Lineage Signal: CVE-2014-6278 Entity: GNU — GNU Bash | Ivanti — Pulse Connect Secure | GitLab — Community and Enterprise Editions Lineage: Public vulnerability → Observed exploitation → CISA KEV confirmation → Ransomware campaign use Relationship:

NØØT Ransomware Watch Classification: Critical CVE: CVE-2014-6278 Product: GNU — GNU Bash | Ivanti — Pulse Connect Secure | GitLab — Community and Enterprise Editions Summary: CISA confirms active exploitation of CVE-2014-6278, CVE-2019-11510, CVE-2021-22205 through its KEV catalog. Affected products include: GNU — GNU Bash, Ivanti — Pulse Connect Secure. CISA also records known ransomware campaign use. Evidence: Active exploitation confirmed by CISA KEV; Ransomware activity; state-sponsored activity; active exploitation; compromise; intrusion; IoCs Impact: CISA confirms active exploitation of CVE-2014-6278, CVE-2019-11510, CVE-2021-22205 through its KEV catalog. Affected products include: GNU — GNU Bash, Ivanti — Pulse Connect Secure. CISA also records known ransomware campaign use. Action: Apply CISA and vendor remediation guidance to affected systems immediately and identify exposed assets. Date: 08 October 2026 Source: https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-281a #NØØT #CyberSecurity #InfoSec #ThreatIntelligence #CyberThreats #CVE #CyberDefense #GNU_GNU_Bash_Ivanti_Pulse_Connect_Secure_GitLab_Co #CVE_2014_6278 #ActiveExploitation #Exploit #Ransomware #CISAKEV