CVE-2026-111357 2

Vulnerability (CVE)

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Cyber Risks CISA Advisories Oct 30, 2026

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability CVE-2026-118527 Ivanti...

Vulnerabilities & Patching

CVE-2026-111357: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Oct 30, 2026

Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-118527.

Vulnerabilities & Patching