CVE-2026-111357: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Summary
Ivanti Connect Secure has a missing authentication vulnerability that allows a local authenticated attacker to escalate privileges. This flaw can be combined with other CVEs, and requires immediate mitigation as per CISA directives.
IFF Assessment
This vulnerability allows for privilege escalation, which is detrimental to defenders' security posture.
Severity
CISA KEV: Listed as actively exploited. Federal patch due: November 02, 2026. Known ransomware use: Unknown.
Defender Context
This critical vulnerability in Ivanti Connect Secure requires prompt attention from defenders. Organizations must prioritize applying the vendor's recommended mitigations to prevent potential privilege escalation and further compromise, especially as it can be chained with other vulnerabilities.