Source: cisa.gov
CVE-2026-111357 is a missing authentication for critical function vulnerability in Ivanti Connect Secure that allows a local authenticated attacker to escalate privileges. The vulnerability can be chained with two other vulnerabilities, CVE-2026-104935 and CVE-2026-118527, potentially increasing the severity of exploitation. CISA has issued an alert urging immediate patching and has referenced BOD 26-04 which prioritizes security updates based on risk. Forensic triage requirements have also been outlined by CISA for affected organizations. The vulnerability is actively exploited and tracked on the NVD. Ivanti has published a security advisory with remediation guidance. Organizations using Ivanti Connect Secure are strongly urged to apply available patches without delay.
