CISA warns of vulnerabilities in Ivanti Connect Secure

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two security vulnerabilities in Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog on Friday. This decision follows reports of active exploitation of these vulnerabilities in the cyber world. The affected vulnerabilities are classified as CVE-2026-111357 and CVE-2026-111358.

CVE-2026-111357 has a CVSS score of 8.8 and represents a critical function where a lack of authentication allows attackers to gain unauthorized access to the system. This vulnerability could enable an attacker to obtain root privileges, posing significant security risks to affected systems.

The second vulnerability, CVE-2026-111358, also has serious security flaws that can be exploited in conjunction with the first vulnerability. This vulnerability could allow attackers to take control of affected systems, potentially leading to a complete loss of data integrity and confidentiality.

Active Exploitation and Recommendations

CISA has determined that these vulnerabilities are being actively exploited, increasing the urgency for organizations to take appropriate security measures. Companies using Ivanti Connect Secure are strongly urged to review their systems and ensure that they have implemented the latest security updates. The agency recommends disabling all unnecessary features to minimize the risk of exploitation.

The discovery of these vulnerabilities comes at a time when cyberattacks on critical infrastructures and corporate networks are increasing worldwide. CISA has repeatedly warned in the past about the dangers posed by unsecured networks and software applications. The current incidents underscore the need to regularly review and update security protocols.

Ivanti Connect Secure is a widely used solution for secure remote access to corporate networks. The software is often employed by organizations to enable employees to access internal resources, especially during times of remote work and telecommuting. The security vulnerabilities could therefore have far-reaching impacts on many businesses that rely on this technology.

CISA has also pointed out that the vulnerabilities pose a significant risk not only to large enterprises but also to small and medium-sized enterprises (SMEs). Many SMEs may not have the same resources or security measures as larger companies, making them more vulnerable to cyberattacks. Therefore, it is crucial that all organizations, regardless of size, take proactive steps to secure their systems.

CISA will continue to provide information about the vulnerabilities and their exploitation to assist companies in defending against cyber threats. The agency has also published a range of resources and guidelines to help organizations improve their security practices and prepare for future attacks.

The affected vulnerabilities in Ivanti Connect Secure are another example of the ongoing challenges in the field of cybersecurity. Given the increasing complexity and frequency of cyberattacks, it is essential for companies to remain vigilant and continuously review their security strategies.