Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances

Reported by Help Net Security (Zeljka Zorz)

Summary by Cyber Security News14 Oct 2026, 10:59 CEST

About this summary. This is a short, independently written summary of an article first published by Help Net Security. Cyber Security News did not report or verify the underlying story. Read the original: https://www.helpnetsecurity.com/2026/10/14/ivanti-zero-days-gain-root-patched-vpn-appliances/

Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances — Image: Help Net Security

A threat actor has been using an exploit chain combining three vulnerabilities in Ivanti’s Connect Secure (ICS) appliances to breach organizations, collect credentials, exfiltrate configuration data, and perform network reconnaissance.

Read the full article at Help Net Security →

Source attribution: headline and facts are from Help Net Security (helpnetsecurity.com). Summary method: excerpt of the source description. See our source attribution policy.