Vulnerability Intelligence Report
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
CVE-2026-111357
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.
CISA KEV
SSVC: Active Exploitation
CVSS Base Score
7.0
HIGH
Exploitability:1.1
Impact Score:5.9
EPSS Probability:0.32%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-829 ↗CWE-829 Inclusion of Functionality from Untrusted Control Sphere
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Ivanti | Connect Secure | 22.8R2.4 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2026-10-15T20:56:57 |
| Published | 2026-10-15T20:56:58 |
| Last Updated | 2026-10-30T19:58:23 |
Community Chatter & Buzz