CWE-340

1 article

BreakingCVE

Patched Ivanti Connect Secure on Oct 13? The root-escalation half of the chain is now on CISA KEV (CVE-2026-111357, CVE-2026-118527)

How to fix CVE-2026-111357: upgrade Ivanti Connect Secure to 25.1.1.3 or 22.8R2.6. CISA added it and CVE-2026-118527 to KEV on Oct 30, and the Oct 13 builds 25.1.1.2 and 22.8R2.5 are still affected. Check edge and domain controller logs before the reboot.

HOL Guard

Related topics

Keep exploring

The engineering desk continues across the ecosystem: security research on shipping agents safely, and plugins that put the standards to work.

Security research hubPlugin marketplace