Critical Security Flaws in Ivanti Connect Secure Actively Exploited

High-risk vulnerabilities, CVE-2026-111357 and CVE-2026-118527, have been discovered in Ivanti Connect Secure. These flaws enable remote attackers to manipulate data and elevate privileges, and are currently being actively exploited. This poses a significant cybersecurity threat to organizations utilizing the affected versions of the software.