Is CVE-2026-23899 known to be exploited?

It is not marked known-exploited in this record.

CVE-2026-23899

Apply the latest Ivanti firmware/software updates for Connect Secure immediately. Ivanti has released security patches for CVE-2026-23899 and CVE-2026-23900. Organizations should verify that all Connect Secure appliances are running the latest patched release and monitor for any anomalous activity consistent with remote access gateway compromise.

Quick answers

What is CVE-2026-23899?: Apply the latest Ivanti firmware/software updates for Connect Secure immediately. Ivanti has released security patches for CVE-2026-23899 and CVE-2026-23900. Organizations should verify that all Connect Secure appliances are running the latest patched release and monitor for any anomalous activity consistent with remote access gateway compromise.
How severe is CVE-2026-23899?: critical
Is CVE-2026-23899 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2026-23899 be mitigated?: Apply the latest Ivanti firmware/software updates for Connect Secure immediately. Ivanti has released security patches for CVE-2026-23899 and CVE-2026-23900. Organizations should verify that all Connect Secure appliances are running the latest patched release and monitor for any anomalous activity consistent with remote access gateway compromise.

CVSS

—

Vendor

Ivanti

Published

Nov 2, 2026 · 12:56

Patch

Unknown / not confirmed

Affected products

Connect Secure, ICS

Mitigation

Ivanti Patches Two Zero-Day Exploited Flaws in Connect Secure

Ivanti has released security updates to address CVE-2026-23899 and CVE-2026-23900, two remote access gateway vulnerabilities in Connect Secure appliances that have been chained together in zero-day attacks observed in the wild since at least October 1, 2026. Successful exploitation could allow unauthenticated remote attackers to achieve code execution or bypass authentication. Users are strongly advised to apply the latest firmware updates immediately.

11m

CVE-2026-23899

Quick answers

Related News

Ivanti Patches Two Zero-Day Exploited Flaws in Connect Secure