Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

T2Critical 100Covered by 1 source · first reported by The Hacker News at 31 Oct, 08:27 UTC

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active exploitation in the wild. The vulnerabilities are listed below - CVE-2026-111357 (CVSS…

security

Sources

• T2Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root AccessThe Hacker News31 Oct, 08:27

Vulnerabilities

• CVE-2026-111357