Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
At a glance
- Severity
- CriticalCVSS 7.0
- Used in attacks
- Yes, 2 of 2 flaws named
- Flaws named
- CVE-2026-111357CVE-2026-118527
- Vendors and products
- Ivanti
- Industries
- Government
- Reported by
- 1 outlet
CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks. The post Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain appeared first on SecurityWeek .
We summarise and link; this source is not one we hold a licence to reproduce. Everything below is what CyberBrief adds: the vulnerabilities involved, whether they are being exploited, who is named, and who else covered it.
Vulnerabilities referenced
- CVE-2026-1113577.0High
Ivanti Connect Secure
Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-118527.
Used in attacksAdded to CISA's list 2026-10-30
Full record → - CVE-2026-118527Not scored yet
Ivanti Connect Secure
Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-111357.
Used in attacksAdded to CISA's list 2026-10-30
Full record →
Fastnexa security experts
This story involves a flaw attackers are already using. Are you exposed?
A Fastnexa penetration tester can check whether CVE-2026-111357, CVE-2026-118527 or anything like them can be used against your websites, apps and network.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →
Coverage
One outlet has carried this so far.
2026-11-02 07:57 UTC
Related stories
- Barracuda Networks security advisory (AV26-1112)
Canadian Centre for Cyber Security · 2026-11-02
- BTCPay Server warns of hot wallet crypto thefts on outdated instances
BleepingComputer · 2026-11-02
- Mutipath TCP: Use and Detection, (Mon, Nov 2nd)
SANS Internet Storm Center · 2026-11-02
- Armadin Tests Find 88% of Severe Flaws Outside Vendor Advisories
Infosecurity Magazine · 2026-11-02
- Apple warns users in 99 countries of mercenary spyware
The Record · 2026-11-02