Ivanti fixes two Connect Secure flaws used together in zero-day attacks

Attackers have chained the remote access gateway vulnerabilities since at least October 1, according to BleepingComputer. SecurityWeek reports that CISA added both flaws, tracked as CVE-2026-111357 and CVE-2026-118527, to its Known Exploited Vulnerabilities catalog after they were used together in attacks before patches were available.

Covered by 2 publishers within 2 hours of the first report.

• BleepingComputer: Ivanti patches two more Connect Secure zero-days chained in attacks

Reporting2

SW SecurityWeek Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain · Eduard Kovacs 2:57 AM

BC BleepingComputer Ivanti patches two more Connect Secure zero-days chained in attacks · Sergiu Gatlan 4:33 AM

Related

BC New Cisco firewall zero-day exploited to crash SSL VPN devices October 29

CSN Critical Unpatched Linux Kernel Flaws Accidentally Disclosed on Public List October 22

THN China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility October 29

CSN Chinese Hackers Use Secret Silent Train Network to Exploit Zero-Days Against U.S. Government and Defense October 28

Topics Zero-day vulnerabilities