Is CVE-2026-111357 known to be exploited?

It is not marked known-exploited in this record.

CVE-2026-111357

Organizations should immediately apply Ivanti's security updates for the KEV-listed flaws. CISA recommends patching CVE-2026-111357 and the other catalogued vulnerability without delay. Follow Ivanti's advisory for patch deployment and verify system integrity after updating.

Quick answers

What is CVE-2026-111357?: Organizations should immediately apply Ivanti's security updates for the KEV-listed flaws. CISA recommends patching CVE-2026-111357 and the other catalogued vulnerability without delay. Follow Ivanti's advisory for patch deployment and verify system integrity after updating.
How severe is CVE-2026-111357?: high, CVSS 8.8
Is CVE-2026-111357 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2026-111357 be mitigated?: Organizations should immediately apply Ivanti's security updates for the KEV-listed flaws. CISA recommends patching CVE-2026-111357 and the other catalogued vulnerability without delay. Follow Ivanti's advisory for patch deployment and verify system integrity after updating.

CVSS

8.8

Vendor

Ivanti

Published

Nov 1, 2026 · 02:20

Patch

Unknown / not confirmed

Affected products

Connect Secure

Mitigation

Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

CISA has added two Ivanti Connect Secure vulnerabilities to its Known Exploited Vulnerabilities catalog following confirmed active exploitation in the wild. The flaws, including CVE-2026-111357 with a CVSS score of 8.8, allow missing authentication for critical functions. Threat actors are chaining multiple Ivanti Connect Secure flaws to gain unauthenticated root access. Ivanti has released security updates; CISA recommends immediate patching.

—1m

CVE-2026-111357

Quick answers

Related News

Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access