Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

T1Critical 100Covered by 1 source · first reported by Rapid7 at 02 Nov, 11:04 UTC

Overview On October 29, 2026, Ivanti updated its security advisory for Ivanti Connect Secure (ICS) to include two additional vulnerabilities and released fixes for both. Ivanti rates CVE-2026-111357, a missing authentication for critical function vulnerability (CWE-306), with a CVSSv3.1 score of…

releasessecurity

Sources

• T1Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Rapid702 Nov, 11:04

Vulnerabilities

• CVE-2026-111357
• CVE-2026-118527