Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

Summary

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active exploitation in the wild. The vulnerabilities are listed below - CVE-2026-111357 (CVSS score: 8.8) - A missing authentication for a critical function vulnerability that could allow a

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.