Ivanti Connect Secure zero-day chain enables root access
Original title: Ivanti Connect Secure Zero-Day Chain Enables Root Access
Attackers use a zero-day chain on Ivanti Connect Secure to gain root access.
Ivanti Connect Secure has a zero-day chain that enables root access. The text indicates the chain is actively exploited with no patch available. No additional technical details or affected versions are stated.
Unconfirmed: Specific details of the zero-day chain are not provided.
- Vendors
- Ivanti
- Products
- Connect Secure
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 25.1.1.3 | and CVE-2026-118527 25.1.1.2 and prior; 22.8R2.5 and prior 25.1.1.3; 22.8R2.6 Ivanti says its newest releases address every v |
From the original article
11 min read at socradar.io
A previously unknown threat actor tracked as UTA0576 chained three Ivanti Connect Secure zero-day vulnerabilities to run code as root on VPN appliances without logging in. The attacks began in early October 2026 and hit at least one appliance that was fully patched at the time. Ivanti says exploitation has affected a limited number of […]
By Yağmur Ernalbant · socradar.io
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.