The Hacker News26h agoenergy 64
Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
image: The Hacker News
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active exploitation in the wild. The vulnerabilities are listed below - CVE-2026-111357 (CVSS score: 8.8) - A missing authentication for a critical function vulnerability that could allow a
This source publishes only a summary in its feed, so the full article lives at the outlet. The link above and below goes to the original.