CVE-2026-111357
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
7.0CVSS base score · high (NVD)
0.5%Chance of exploitation in the next 30 days (FIRST EPSS)
ExploitedIn CISA KEV · federal patch deadline Nov 2, 2026
What happened
CISA added two previously zero-day Ivanti Connect Secure vulnerabilities, CVE-2026-111357 and CVE-2026-118527, to its Known Exploited Vulnerabilities catalog. These flaws were exploited in chained attacks against VPN deployments. Organizations using Ivanti Connect Secure should prioritize patching these flaws and review VPN access logs for signs of compromise.
From the Intel60 brief of Nov 2, 2026. AI-written summary: check the sources before acting.
Intel60 briefs
- CriticalIvanti Connect Secure chained zero-days added to KEVNov 2, 2026
- CriticalCISA adds Ivanti Connect Secure auth bypass to KEVOct 30, 2026
- CriticalCISA adds Ivanti Connect Secure upload flaw to KEVOct 30, 2026