Ivanti Connect Secure: Exploited VPN Vulnerability Chain

secpoint (49)in #secpoint • 4 days ago

Already patched your VPN in October? Check the later fixes too.

Ivanti updated its advisory on 29 October 2026 to include CVE-2026-111357 and CVE-2026-118527 alongside CVE-2026-104935.
The chain has been used to gain unauthenticated root-level access to affected VPN appliances.

The newer flaws individually require authenticated access; they are not standalone unauthenticated takeovers.
Potentially affected systems need the correct branch-specific updates and a separate review for compromise. Patching does not undo credential theft.

SecPoint Penetrator helps organizations assess exposed services and prioritize remediation.

Get a FREE vulnerability scan:
https://www.secpoint.com/free-vulnerability-scan.php

Become a SecPoint partner:
https://www.secpoint.com/partner-signup.php

#SecPoint #Ivanti #VPNSecurity #VulnerabilityManagement #CyberSecurity

#cybersecurity #ivanti #vpnsecurity #vulnerabilitymanagement

4 days ago in #secpoint by secpoint (49)

$0.00