CISA Adds Two Ivanti Connect Secure Vulnerabilities to KEV Catalog Following Confirmed Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency has added two vulnerabilities affecting Ivanti Connect Secure to its Known Exploited Vulnerabilities catalog after real-world exploitation was confirmed. The flaws, tracked as CVE-2026-111357 and CVE-2026-118527, can be chained with a third vulnerability to achieve remote compromise. CVE-2026-111357 allows local authenticated attackers to escalate privileges due to missing authentication in a critical function. CVE-2026-118527 permits remote upload of arbitrary files to disk despite requiring authentication because of predictable identifiers. CISA first listed CVE-2026-111357 on October 29 before briefly removing it and re-adding both issues on October 30, highlighting ongoing tracking confusion.
Security NEXTNov 2, 2026Translated from Japanese