Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks. The post Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain appeared first on SecurityWeek .
- Vendor
- Ivanti
- Product
- Connect Secure
- EPSS
- 0.005 (p45)
- Exploitation
- observed in the wild
- Exposure class
- Edge / VPN / firewall
Why it ranks 72 (Critical)
- Exploitation observed in the wild
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Ivanti)
- Covered by 5 independent sources
- Reporting
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- SecurityWeek (securityweek.com)
- CVE-2026-111357 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-118527 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.