importantSYS.SOURCE: The Hacker News• 2026-10-31T13:57:43+05:30
Exploitation of Multiple Ivanti Connect Secure Vulnerabilities Enables Unauthenticated Root Access
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two Ivanti Connect Secure vulnerabilities to its KEV catalog due to active exploitation. These flaws enable attackers to achieve unauthenticated root access by chaining multiple vulnerabilities.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active exploitation in the wild.
The vulnerabilities are listed below -
CVE-2026-111357 (CVSS score: 8.8) - A missing authentication for a critical function vulnerability that could allow a
*** END OF TRANSMISSION ***