ivanti
2 live · 2 on record · last incident 15 days ago
Live2
- live4.3Ivanti Connect Secure CVE-2026-118527: Ivanti Connect Secure Identifier Generation Flaw
Patch now · Exploited · Patched · since 30 Oct 2026 · updated 2 Nov 2026 · CVE-2026-118527
Ivanti Connect Secure contains a predictable identifier vulnerability that enables remote authenticated users to upload arbitrary files to disk. CISA added the issue to its Known Exploited Vulnerabilities catalog.
Do:Update Ivanti Connect Secure to 25.1.1.3 or 22.8R2.6.
- live7.0Ivanti Connect Secure CVE-2026-111357: Ivanti Connect Secure Authentication Bypass
Patch now · Exploited · Patched · since 30 Oct 2026 · updated 31 Oct 2026 · CVE-2026-111357
Ivanti Connect Secure contains a missing authentication vulnerability that allows local attackers to escalate privileges. CISA confirmed active exploitation in the wild.
Do:Update Ivanti Connect Secure to 25.1.1.3 or 22.8R2.6.
Earlier0
Nothing closed yet.