Ivanti releases patches for both newly identified zero-days
1 Nov 2 · 9d ago · 1 article · 3 posts · 2 sources · development 1 of 1
Ivanti ships patches addressing CVE-2026-111357 and CVE-2026-118527 in versions 25.1.1.3 and 22.8R2.6. The vendor states the updates "address all vulnerabilities which were chained and exploited in the wild." Organizations on prior patched versions must upgrade again.
“The latest release addresses all vulnerabilities which were chained and exploited in the wild.”
IvantiIvanti VendorUTA0576 Threat actorVolexity Security researcherCISA Federal cybersecurity agency
The whole story articlesposts the bright band is this development · numbered dots are the others · click one to jump
What was reported 1 claim about this development
-
first by SecurityWeek, 9d ago
What people said 3 voices · verbatim
-
O
「IvantiがConnect Secureのゼロデイ脆弱性2件をパッチし、連鎖攻撃を防止」: # BLEEPINGCOMPUTER 「Ivantiは、少なくとも10月1日以降、ゼロデイ攻撃で連鎖的に利用されてきたConnect Secure(ICS)リモートアクセスゲートウェイの脆弱性2件を修正するセキュリティアップデートをリリースした。 攻撃者は、これらの2つの脆弱性( CVE-2026-111357 および CVE-2026-118527 として追跡されている)と認証バイパスの脆弱性(CVE-2026-104935)を悪用しましたが、Ivantiは 先月、この脆弱性を修正し 、主な攻撃対象領域を解消しました。…
-
B
Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at least October 1. https://www. bleepingcomputer.com/news/secu rity/ivanti-patches-two-more-connect-secure-zero-days-chained-in-attacks/
-
P
Ivanti patches two more Connect Secure zero-days chained in attacks https://www. bleepingcomputer.com/news/secu rity/ivanti-patches-two-more-connect-secure-zero-days-chained-in-attacks/
All 1 developments of Ivanti patches two more zero-days chained in Connect Secure… →
MastodonNewswires