Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain

Reported by SecurityWeek (Eduard Kovacs)

Summary by Cyber Security News2 Nov 2026, 08:57 CET

About this summary. This is a short excerpt from the description that SecurityWeek published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.securityweek.com/ivanti-patches-two-more-zero-days-exploited-in-connect-secure-attack-chain/

CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks.

Read the full article at SecurityWeek →

Source attribution: headline and facts are from SecurityWeek (securityweek.com). Summary method: excerpt of the source description. See our source attribution policy.