Security
Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
The Hacker News·October 31, 2026·1 min read
CISA added two Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog on Friday after active exploitation. The vulnerabilities include CVE-2026-111357 (CVSS 8.8), a missing authentication flaw allowing unauthorized access. Attackers chained three flaws to gain unauthenticated root access to devices. Organizations are urged to patch immediately.
Read at The Hacker NewsDaily crypto arcade
Read the news, then play it.
Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.