Citrix and Ivanti patch 19 flaws, including critical RCE bugs
Ivanti reports no evidence of exploitation; CSA 5.0.8.1 and Endpoint Manager 2024 SU8 fix the two critical defects.
Stories per day · 30 days
4 RSS
Relatedconnect-secure30kev23zero-day19cisa16vpn16cve-2026-10493512uta057612authentication-bypass9privilege-escalation4volexity4credential-theft3rce3sql-injection3windows3cisa-kev2csa2endpoint-manager2epmm2
48 stories, newest first · one card per story
Stories tagged #ivanti
Ivanti patches unauthenticated SQL injection RCE in Endpoint Manager
CVE-2026-121653 scores 9.8 in EPM before 2024 SU8; Ivanti says no known customer exploitation.
Ivanti patches unauthenticated flaws in Endpoint Manager and CSA
CVE-2026-121653 scores 9.8 and allows unauthenticated SQL injection code execution on Endpoint Manager Core before 2024 SU8.
1
CISA orders fixes for exploited Ivanti Connect Secure flaws
Attackers chained both flaws with CVE-2026-104935 for VPN footholds; federal deadlines are November 2 and November 13.
1
Check Point weekly bulletin covers crypto thefts and exploited flaws
The November 2 roundup also cites a claimed $6.3 billion Binance theft and exposure of about 4.9 million student-aid records.
4
Ivanti Connect Secure zero-day chain enables root access
Attackers use a zero-day chain on Ivanti Connect Secure to gain root access.
Ivanti Connect Secure zero-days CVE-2026-111357 and CVE-2026-118527 exploited in the wild
Two zero-days in Ivanti Connect Secure allow local privilege escalation and remote file upload; chained with CVE-2026-104935 for unauthenticated root access; fixed in 25.1.1.3 and 22.8R2.6
1
Ivanti Patches Two Connect Secure Zero-Days Chained in Attacks
Ivanti released patches for two new zero-day flaws chained in attacks since October with CISA ordering federal agencies to patch CVE-2026-104935.
Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
Chained zero-days in Ivanti Connect Secure VPN enabled root access and data exfiltration; Volexity attributes activity to UTA0576.
2
CISA adds exploited Ivanti Connect Secure flaws to its KEV catalog
Agencies must fix CVE-2026-111357 by November 2 and CVE-2026-118527 by November 13; UTA0576 chained them with CVE-2026-104935 for root access.
6
Attackers chain three Ivanti Connect Secure flaws for unauthenticated root
CISA added CVE-2026-111357 and CVE-2026-118527 to KEV; UTA0576 paired them with CVE-2026-104935, and fixes are in 25.1.1.3 and 22.8R2.6.
2
CISA adds two exploited Ivanti Connect Secure flaws to KEV
CVE-2026-111357 and CVE-2026-118527 were added after evidence of active exploitation; FCEB agencies must prioritize them under BOD 26-04.
1
Ivanti Connect Secure zero-days exploited for root access and credential theft
Volexity links the October chain to UTA0576; Ivanti says few customers were hit and fixed builds are 25.1.1.3 and 22.8R2.6.
3
Ivanti Connect Secure zero-days chained for unauthenticated root
Fixes are 25.1.1.3 and 22.8R2.6 after UTA0576 hit a fully patched 22.8R2.4 appliance.
8
CISA KEV lists Ivanti Connect Secure flaw CVE-2026-111357
A local authenticated attacker can escalate privileges; the federal due date is November 2, and ransomware use is unknown.
1
CISA adds exploited Ivanti Connect Secure and GitLab flaws to KEV
CVE-2026-111357 is missing authentication in Ivanti Connect Secure; CVE-2026-97229 is an integer overflow in GitLab CE and EE.
2
Eclypsium report details exploited flaws in firewalls, VPNs and network appliances
InfraTrust tracked 133 new advisories covering 2,813 vulnerabilities in a month; 16 advisories involved actively exploited KEV-listed flaws.
6
Check Point weekly brief: utility and app breaches, exploited zero-days
CenterPoint says more than 1 million Texans were exposed, while Burger King Japan cites about 11.18 million members.
12
Ledger implant linked to $93M theft; npm flaw hit 1,500 packages
The roundup also covers an exploited Windows Shell flaw and an Ivanti Connect Secure zero-day chain.
CVE-2026-104935 | Ivanti Connect Secure Authentication Bypass and Remote Code Execution Vulnerability
Actively exploited Ivanti Connect Secure flaw CVE-2026-104935 lets unauthenticated attackers bypass authentication and run commands.
10
The Q3 Vulnerability Pulse: Discovery ≠ Exploitation
Talos says 2026 CVE volume passed 70,000 while KEV growth lagged, so discovery is not exploitation.
CISA Warns of Hackers Exploiting Ivanti Connect Secure Zero-Day to Steal Credentials
CISA says attackers are exploiting Ivanti Connect Secure zero-day CVE-2026-104935 to steal credentials.
15
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
Attackers exploited Ivanti Connect Secure zero-day CVE-2026-104935 for unauthenticated remote code execution.
4
Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks
Ivanti patched Connect Secure zero-day CVE-2026-104935 after UTA0576 used it for remote command execution.
3