News
cybersecurity Over 1,000 GitLab servers vulnerable to ongoing RCE attacks - BleepingComputer cybersecurity iPhone Jailbreak Vulnerabilities Put Crypto Wallet Seed Phrases at Risk on Older Devices - CyberPress threat-intel Unpatchable Hardware Flaws in Older iPhones Allow Attackers to Steal Crypto Wallet Recovery Phrases - GBHackers threat-intel New ChatGPT Phishing Kit Uses Rotating WordPress Websites to Steal Payment Details and OTPs - GBHackers cybersecurity Hackers Compromise Ukraine and Russia’s Emergency Alert Apps to Spread Fake Nuclear Warnings - CyberPress cybersecurity Malicious Claude Code Extension Served in Cursor Supply Chain Attack - SecurityWeek cybersecurity Synology warns of C3RB3R ransomware attacks targeting NAS devices - BleepingComputer threat-intel Hackers Target Emergency Alert Apps in Ukraine and Russia, Sending Fake Nuclear Attack Warnings - GBHackers cybersecurity Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data - The Hacker News threat-intel Hackers Target Supermarket Refrigeration Systems Across Sweden, Raising Freezer Temperatures to 55°C - GBHackers cybersecurity Hackers Use Fake ChatGPT Plus Billing Emails to Steal Credit Card Details and OTP Codes - CyberPress cybersecurity Hackers Target Supermarket Refrigeration Systems in Sweden, Raising Temperatures to 50°C - CyberPress threat-intel Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527) - Rapid7 Emergent Threat Response cybersecurity My Journey to the Center of America’s Political Spam Text Hell - Wired Security threat-intel Researchers Discover High-Severity ChatGPT Flaw That Exposed Private Conversations to Attackers - GBHackers
1 / 15
All news ›
Threat Intel

Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Rapid7 Emergent Threat Response ·

Overview On October 29, 2026, Ivanti updated its security advisory for Ivanti Connect Secure (ICS) to include two additional vulnerabilities and released fixes for both. Ivanti rates CVE-2026-111357 , a missing authentication for critical function vulnerability ( CWE-306 ), with a CVSSv3.1 score of 8.8 ; it allows a local authenticated attacker to escalate privileges. CVE-2026-118527 , classified as generation of predictable numbers or identifiers ( CWE-340 ), has an Ivanti-assigned CVSSv3.0 score of 4.3 and, according to CISA's KEV entry , allows a remote authenticated attacker to upload attacker-controlled content to a known location on disk. Per Ivanti, exploitation in the wild has already occurred prior to disclosure, affecting a limited number of customers when these flaws are chained with CVE-2026-104935 , an authentication bypass by spoofing ( CWE-290 ). Rapid7 covered the original disclosure on October 13, 2026 , when a fix for CVE-2026-104935 was available but the privilege es

Continue on Rapid7 Emergent Threat Response ↗ ‹ All news Get the newsletter

The summary and image come from Rapid7 Emergent Threat Response; the image is shown from their website.