Ivanti Connect Secure Multiple Vulnerabilities

Ivanti Connect Secure Multiple Vulnerabilities

Release Date: 2 Nov 2026

Multiple vulnerabilities were identified in Ivanti Connect Secure. A remote attacker could exploit some of these vulnerabilities to trigger data manipulation and elevation of privilege on the targeted system.

 

Note:

CVE-2026-111357 and CVE-2026-118527 are being exploited in the wild. CVE-2026-111357 is a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. CVE-2026-118527 is a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. These vulnerabilities can be chained with CVE-2026-104935, which was previously covered in Ivanti Connect Secure Remote Code Execution Vulnerability. Hence, the risk level is rated as High Risk. 

 

---

Impact

• Data Manipulation
• Elevation of Privilege

---

System / Technologies affected

Versions prior or equal to:

 

• Ivanti Connect Secure version 22.8R2.5
• Ivanti Connect Secure version 25.1.1.2

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935?language=en_US

---

Vulnerability Identifier

• CVE-2026-111357
• CVE-2026-118527

---

Source

• Ivanti

---

Related Link

• https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935?language=en_US
• https://www.cisa.gov/news-events/alerts/2026/10/30/cisa-adds-two-known-exploited-vulnerabilities-catalog