High Threat Security Alert (A26-11-03): Multiple Vulnerabilities in Ivanti Connect Secure

Description:

Ivanti has released security advisories to address the vulnerabilities in Ivanti products. Detailed information about the vulnerabilities can be found at:
https://forums.ivanti.com/s/article/kA1UL000000A89B0AS

Reports indicated that an elevation of privilege vulnerability (CVE-2026-111357) is being exploited in the wild. System administrators are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.

Affected Systems:

• Ivanti Connect Secure (ICS) versions 22.8R2.5 and prior, versions 25.1.1.2 and prior

For detailed information of the affected systems, please refer to the corresponding security advisory at vendor's website.

Impact:

Successful exploitation of the vulnerabilities could lead to elevation of privilege on an affected system.

Recommendation:

Patches for affected systems are available. System administrators of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

More Information:

• https://forums.ivanti.com/s/article/kA1UL000000A89B0AS
• https://www.hkcert.org/security-bulletin/ivanti-connect-secure-multiple-vulnerabilities_20261102
• https://www.hkcert.org/security-bulletin/ivanti-connect-secure-remote-code-execution-vulnerability_20261014
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111357
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-118527