Skip to page content

AEGLIX MIND

Intelligence for Africa and the Gulf

AEGLIX news · Global

Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

The Hacker News · [email protected] (The Hacker News)

Published by the source: Sat, 31 Oct 2026 13:57:43 +0530

From The Hacker News

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active exploitation in the wild. The vulnerabilities are listed below - CVE-2026-111357 (CVSS score: 8.8) - A missing authentication for a critical function vulnerability that could allow a

Publisher-provided RSS excerpt. This is not the full article or an independently verified AEGLIX assessment.

Read the full story at The Hacker News ↗ (opens in a new tab)

Explore the story

The complete reporting, updates, and supporting evidence remain with the original publisher. Check the publication date and source before acting on a headline.

These are research tools; no CVE, indicator, or campaign relationship is inferred from this article.

More from The Hacker News

← Back to security news