CVE-2026-1113577.0High
Ivanti Connect Secure vulnerability
Ivanti · Connect Secure
Not in CISA KEV
0.3%probability of exploitation in the next 30 days
16th percentile
050100
Higher than 16% of scored CVEs
7.0HighCVSS
LowMediumHighCrit.
DescriptionNVD
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 30 Oct.
- Ivanti Connect Secure flaws exploited in zero day attacksSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.