Security Advisory

Ivanti Product Security Update Advisory

  • Nov 02 2026
Ivanti Product Security Update Advisory

Overview

Ivanti has released a security update to address a vulnerability in Ivanti Connect Secure (ICS). Users of this product should update to the latest version of the patch.

Affected Products

  • Ivanti Connect Secure (ICS) version 22.8R2.5 or earlier. – Ivanti Connect Secure (ICS) version 25.1.1.2 or earlier.

Resolved Vulnerabilities

  • CVE-2026-111357. This is a local privilege escalation vulnerability in Ivanti Connect Secure (ICS) caused by a lack of authentication for critical functions.
  • CVE-2026-118527. This is a vulnerability in Ivanti Connect Secure (ICS) involving the use of predictable file names.

Patch Information

A Vulnerability Patch has been released in the latest update. You must update to the following versions as instructed on the reference site. – Ivanti Connect Secure (ICS) 22.8R2.6. – Ivanti Connect Secure (ICS) 25.1.1.3.

Note

  • Security Advisory Ivanti Connect Secure (CVE-2026-104935).

Tags:
Previous Post

Next Post