CyberSecurity News
Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
AI summary
Ivanti has patched two additional zero-day vulnerabilities that were exploited in attacks targeting its Connect Secure product. The US Cybersecurity and Infrastructure Security Agency has added these flaws to its Known Exploited Vulnerabilities catalog. The vulnerabilities were chained together in zero-day attacks, highlighting the need for swift remediation.
Vulnerabilities mentioned
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.
Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-111357.
This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to SecurityWeek.