Ivanti's VPN is back on CISA's exploited list, with two more flaws.
By Lior AharonovFounder, 7IT Solutions ·
What happened
On Friday, 30 October, CISA added two Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog, based on evidence of active exploitation: CVE-2026-111357, missing authentication for a critical function, and CVE-2026-118527, predictable numbers or identifiers.
Why it matters
Your VPN is the front door to the build servers and the production network. CISA lists one of the two as missing authentication for a critical function.
What to do
If you run Ivanti Connect Secure, open Ivanti's advisories for these two CVE IDs today and install the fixed release.
My take
Lior Aharonov
Founder, 7IT Solutions
A VPN is the one box everybody can reach. Ask whether yours has to face the internet at all.
Sources
| CISA adds two known exploited vulnerabilities to catalog (30 October) | cisa.gov |
Researched with AI tools; every fact is checked against the linked sources.