Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

The US Cybersecurity and Infrastructure Security Agency has added two Ivanti Connect Secure security flaws to its Known Exploited Vulnerabilities catalog due to active exploitation. One of the vulnerabilities, CVE-2026-111357, has a CVSS score of 8.8 and is related to missing authentication for a critical function, which could allow unauthorized access. Attackers are chaining three Ivanti Connect Secure flaws to gain unauthenticated root access. The vulnerabilities are being exploited in the wild, prompting their addition to the KEV catalog. The active exploitation of these flaws suggests that attackers are actively targeting them.