Reported 80ExploitedFirst seen 31 Oct 2026, 08:27 UTC

Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

Coverage

Headline	Source	Type	Published
Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access	The Hacker News	Security press	31 Oct 2026, 08:27 UTC

CVE	Exploited (CISA KEV)	CVSS	EPSS
CVE-2026-111357	Yes, since 30 Oct 2026	—	—

CVSS from NVD; EPSS is FIRST’s estimate of the chance of exploitation in the next 30 days.

Confidence	80 · Reported
Most trusted source	70
Independent organisations reporting it (1)	+0
Confirmed by an official source or CISA KEV	+10

We link to the original reporting and don’t reproduce it. Read the sources above for the full details.