CVE-2026-111357

Vendor

Ivanti

Product

Connect Secure

CVSS

7.0

EPSS

0.005 (p45)

CISA KEV

added 30 Oct 2026, due 2 Nov 2026 (1d)

Weakness

CWE-306, CWE-862, CWE-345

Exposure class

Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 85
   KEV NVD 16d ago

   Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability

   Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-104935 and…

   KEV · due 2 Nov 2026 CVSS 7.0 Fix available CVE-2026-111357 Ivanti
2. 85
   CISA alert CISA 18d ago

   CISA Urges Patching Newly Exploited Vulnerabilities in Ivanti Connect Secure

   Update October 30, 2026 : CISA has updated this Alert to: (1) include CVE-2026-111357 and CVE-2026-118527 and reflect their addition to the Known Exploited Vulnerabilities (KEV) Catalog on October 30, 2026; and (2) update the…

   Exploited EPSS 0.87 Fix available CVE-2026-111357CVE-2026-118527CVE-2026-104935 Ivanti
3. 71
   CISA alert CISA 43h ago

   CISA Adds Two Known Exploited Vulnerabilities to Catalog

   CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function…

   Exploited CVE-2026-111357CVE-2026-118527 Ivanti
4. 37
   CCCS advisory CCCS 15d ago

   Ivanti security advisory (AV26-1035)

   EPSS 0.87 CVE-2026-104935CVE-2026-111357CVE-2026-118527+1 more Ivanti