Warning Against Vulnerabilities Exploited in Actual Attacks (Ivanti Connect Secure)
Overview
The Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks. The list includes two vulnerabilities related to Ivanti Connect Secure.
Vulnerability
- CVE-2026-118527: A vulnerability involving the generation of predictable numbers or identifiers in Ivanti Connect Secure.
- CVE-2026-111357: A vulnerability involving a lack of authentication for critical features in Ivanti Connect Secure.
Action Items
CISA recommends implementing mitigation measures in accordance with the manufacturer’s guidelines. Additionally, organizations must comply with CISA BOD 26-04, the Risk-Based Security Update Prioritization Guidance, and the forensic classification requirements. These BOD 26-04 guidelines must also be applied to cloud services, and if no mitigations are available, use of the product must be discontinued.
Note
CISA has included this vulnerability in its Known Exploited Vulnerabilities Catalog.
