CISA Adds Two Known Exploited Vulnerabilities to Catalog
CVE-2026-111357Zuerst gemeldet vor 29 Tagen · Letzte Aktualisierung vor 9 Tagen
Zusammenfassung
Update October 30, 2026: CISA has updated this Alert to: (1) include CVE-2026-111357 and CVE-2026-118527 and reflect their addition to the Known Exploited Vulnerabilities (KEV) Catalog on October 30, 2026; and (2) update the affected Ivanti Connect Secure versions. CISA is aware of Ivanti’s...
Quelle: CISA Current Activity
Zeitstrahl des Vorfalls
Risk Signal Score — Aufschlüsselung
CVSS 7 — Hoch
Im CISA KEV-Katalog (aktiv ausgenutzt)
PoC / Exploit-Hinweise gefunden
CVE-Details
CVSS Score
7.0
HIGH
EPSS Wahrscheinlichkeit
0.5%
Exploit in 30 Tagen
KEV Status
Aktiv ausgenutzt
Quellen (15)
CISA Urges Patching Newly Exploited Vulnerabilities in Ivanti Connect Secure
CISA Current Activity · 13. Okt. 12:00
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Current Activity · 29. Okt. 12:00
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Current Activity · 29. Okt. 12:00
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Current Activity · 30. Okt. 12:00
Ivanti warns of Connect Secure zero-day exploited in attacks
BleepingComputer · 13. Okt. 15:45
Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
The Hacker News · 13. Okt. 17:33
Security-Appliance: Angreifer nutzen Sicherheitslücke in Ivanti Connect Secure
heise Security · 13. Okt. 17:38
[MàJ] Multiples vulnérabilités dans Ivanti Connect Secure (ICS) (14 octobre 2026)
CERT-FR · 14. Okt. 00:00
[NEU] [hoch] Ivanti Connect Secure: Schwachstelle ermöglicht die Umgehung von Authentifizierung und Codeausführung
CERT-Bund · 14. Okt. 12:10
CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts
The Hacker News · 14. Okt. 12:30
[NEU] [mittel] Ivanti Connect Secure: Schwachstelle ermöglicht Privilegieneskalation
CERT-Bund · 16. Okt. 10:35
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
The Hacker News · 30. Okt. 07:27
Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
SecurityWeek · 30. Okt. 09:32
Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
The Hacker News · 31. Okt. 08:27
Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
SecurityWeek · 2. Nov. 07:57
ATT&CK Techniken (1)