news
The Hacker News
October 31st, 2026 at 8:27 AMAttackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active exploitation in the wild. The vulnerabilities are listed below - CVE-2026-111357 (CVSS score: 8.8) - A missing authentication for a critical function vulnerability that could allow a
#ai
Get stories like this every Monday
The week's most important AI news in one email. Free, unsubscribe anytime.
Score: 2.33
Engagement proxy: 0
Canonical link: https://thehackernews.com/2026/10/attackers-chain-three-ivanti-connect.html