The Cybersecurity and Infrastructure Security Agency has added two Ivanti Connect Secure vulnerabilities to its Known Exploited Vulnerabilities catalog following reports of active exploitation, as ...
Hackers were already chaining together three vulnerabilities in Ivanti Secure Connect before the company updated its security advisory late last week.
CISA added two new Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527) to its Known Exploited Vulnerabilities catalog.
Attackers combined three flaws in Ivanti Connect Secure VPN gateways to take full control of devices that were already patched.