Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain

T2Critical 100Covered by 1 source · first reported by SecurityWeek at 02 Nov, 07:57 UTC

CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks. The post Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain appeared first on SecurityWeek.

security

Sources

• T2Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack ChainSecurityWeek02 Nov, 07:57

Vulnerabilities

• CVE-2026-111357
• CVE-2026-118527