Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

The US Cybersecurity and Infrastructure Security Agency CISA on Friday added two security flaws impacting Ivanti Connect Secure ICS to its Known Exploited Vulnerabilities KEV catalog following active exploitation in the wild The vulnerabilities are listed below CVE2026111357 CVSS score 88 A missing authentication for a critical function vulnerability that could allow a