Blog
// Cybersecurity

Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

· mirrorspeed@mirrorquant.com · 3 min read · 4 views


Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

Release Date: 1 11 月, 2026 7:02 上午
Campaign: MirrorSpeed EN
Source Site: The Hacker News

Summary

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active exploitation in the wild.

The vulnerabilities are listed below –

CVE-2026-111357 (CVSS score: 8.8) – A missing authentication for a critical function vulnerability that could allow a

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active exploitation in the wild.

The vulnerabilities are listed below –

CVE-2026-111357 (CVSS score: 8.8) – A missing authentication for a critical function vulnerability that could allow a

Author:

{authorlink}

Original Article: Read Full Post

Read more tech without borders — MirrorSpeed VPNFast mirror acceleration, encrypted privacy, global nodes for stable access to overseas resources.
Get MirrorSpeed
Read more tech without borders — MirrorSpeed VPNFast mirror acceleration, encrypted privacy, global nodes for stable access to overseas resources.
Get MirrorSpeed