Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active exploitation in the wild.

The vulnerabilities are listed below –

CVE-2026-111357 (CVSS score: 8.8) – A missing authentication for a critical function vulnerability that could allow a

The post “Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access” appeared first on The Hacker News

Source:The Hacker News – [email protected] (The Hacker News)