CISA adds two Ivanti Connect Secure flaws to exploited-vulnerability catalog

· Cybersecurity · United States

The U.S. Cybersecurity and Infrastructure Security Agency added two security flaws affecting Ivanti Connect Secure to its Known Exploited Vulnerabilities catalog on Friday, after active exploitation in the wild. One of the vulnerabilities, CVE-2026-111357, carries a CVSS score of 8.8 and is described as a missing-authorization issue. Attackers chained three Ivanti Connect Secure flaws together to obtain unauthenticated root access to targeted devices. The KEV listing signals that federal agencies face remediation deadlines and that the flaws are being used against real targets. Organizations running Ivanti Connect Secure appliances, which sit at the network edge and are widely exposed, should treat patching as urgent.

Why it matters：Edge appliances like Ivanti Connect Secure are a favored entry point for intrusion, and chaining flaws into root access shows how quickly unpatched perimeter devices become enterprise-wide compromises.

Key points

  • CVE-2026-111357 has a CVSS score of 8.8 and is described as a missing-authorization flaw.
  • Attackers chained three Ivanti Connect Secure flaws to gain unauthenticated root access.
  • CISA added two of the flaws to its KEV catalog on Friday.

Sources (original reporting)

More stories from this day