Vulnerability details
CVE-2026-111357
Actively exploited
Ivanti Connect Secure
CVSS 3.1
7.0High
Official description
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.
Related news
-
Week in review: Refrigeration cyberattacks hit European retailers again, Patch Tuesday forecast
Help Net Security · 2 d ago
-
CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527)
Help Net Security · 8 d ago
-
Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
SecurityWeek · 8 d ago
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.0High | 3.1 | CVEProject cvelistV5 (CNA) (mitre) | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Ivanti | Connect Secure | 22.8R2.4 | CVEProject cvelistV5 (CNA) |
References and advisories
3- https://www.volexity.com/blog/2026/10/13/a-series-of-unauthenticated-events-chained-exploitation-of-ivanti-connect-secure-zero-days/ third-party-advisory
- https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935 related
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111357 government-resource
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-10-16
- Last updated
- 2026-10-31
- State
- Published
- Assigner (CNA)
- mitre
- Kolun priority
- 72 · High
CISA KEV catalog
- Date added
- 2026-10-30
- Due date
- 2026-11-02
- Used in ransomware
- Unknown
Exploit prediction (EPSS)
0.53%
Probability of exploitation in 30 days
45.3%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- Active
- Technical impact
- Total
Weaknesses (CWE)
- CWE-829Inclusion of Functionality from Untrusted Control Sphere