CVE-2026-111357: Ivanti Connect Secure Missing Authentication for Critical

Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability. Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-118527.

Related briefings

Browse the CVE database

Read the full analysis on IntelFusions