Ivanti Connect Secure Plagued by Multiple Actively Exploited Vulnerabilities

Multiple high-risk vulnerabilities, including CVE-2026-111357 (missing authentication for critical function) and CVE-2026-118527 (predictable numbers/identifiers generation), have been identified in Ivanti Connect Secure. These flaws are being actively exploited in the wild and can be chained with a previously disclosed remote code execution vulnerability (CVE-2026-104935) to achieve data manipulation and privilege escalation.