---
title: U.S. Authorities Warn of Vulnerabilities in Ivanti Connect Secure
url: https://www.dataloco.com/en/us-authorities-warn-of-vulnerabilities-in-ivanti-connect-secure
published: 2026-11-04T16:20:51+00:00
language: en
section: Security
source: https://www.security-next.com/192266
organizations: ivanti, ics, cisa, kev
publisher: Dataloco
---

# U.S. Authorities Warn of Vulnerabilities in Ivanti Connect Secure

U.S. authorities have issued a warning regarding two vulnerabilities found in Ivanti's remote access product, Ivanti Connect Secure (ICS), after confirming their exploitation. There have also been reports of attacks combining three vulnerabilities.

On October 30, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the vulnerabilities CVE-2026-111357 and CVE-2026-118527 to its Known Exploited Vulnerabilities Catalog (KEV).

Both vulnerabilities pertain to Ivanti Connect Secure (ICS). CVE-2026-111357 is associated with a lack of authentication in critical functions, allowing privilege escalation when a user is authenticated locally.

In contrast, CVE-2026-118527 involves the generation of predictable numbers and identifiers. Although authentication is required, this vulnerability permits the remote upload of files containing arbitrary content to disk.

Regarding CVE-2026-111357, it was initially announced for inclusion in the KEV on October 29, 2026, but this was later revoked. However, it was re-registered on October 30, indicating confusion surrounding its status.

## This story in other languages

- [Indonesia](https://www.dataloco.com/id/peringatan-dikeluarkan-terkait-eksploitasi-kerentanan-ivanti-connect-secure)
- [中文](https://www.dataloco.com/zh/ivanti-connect-secure)
- [Español](https://www.dataloco.com/es/advertencia-sobre-vulnerabilidades-en-ivanti-connect-secure)
- [Italiano](https://www.dataloco.com/it/attenzione-per-vulnerabilita-in-ivanti-connect-secure)
- [Polski](https://www.dataloco.com/pl/uwaga-na-wykorzystanie-luk-w-zabezpieczeniach-ivanti-connect-secure)
- [العربية](https://www.dataloco.com/ar/ththyr-mn-astghlal-thghrat-fy-ivanti-connect-secure)
- [Deutsch](https://www.dataloco.com/de/warnung-vor-ausnutzung-von-schwachstellen-in-ivanti-connect-secure)
- [Türkçe](https://www.dataloco.com/tr/ivanti-connect-secure-urunundeki-zafiyetler-icin-uyari-yapildi)
- [עברית](https://www.dataloco.com/he/ivanti-connect-secure-2)
- [Português (Brasil)](https://www.dataloco.com/pt-br/autoridades-alertam-sobre-vulnerabilidades-no-ivanti-connect-secure)
- [Français](https://www.dataloco.com/fr/alerte-sur-des-vulnerabilites-dans-ivanti-connect-secure)