SecuritySecurityWeek1 day ago
Ivanti Patches Two More Zero-Days
3 min read
Ivanti released patches on Thursday for two new Connect Secure zero-days, CVE-2026-111357 and CVE-2026-118527, to its October 13 advisory. These fixes address privilege escalation and predictable identifiers affecting ICS versions 25.1.1.2 and 22.8R2.5. CISA added the flaws to its KEV catalog on Friday, giving federal agencies until November 2 and November 13 to remediate them.
Level
Hype check
Tap to vote and see what everyone thinks.