CVE-2026-111357: Ivanti Connect Secure Missing Authentication for Critical
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability. Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-118527.
- CISA KEV-listed (remediation due 2026-11-02)
- EPSS 0.3% (24.6% percentile)
- CVSS 7 high