Ivanti Updates Advisory for Actively Exploited Connect Secure Vulnerabilities

Ivanti has updated its security advisory regarding three vulnerabilities (CVE-2026-104935, CVE-2026-111357, CVE-2026-118527) in its Connect Secure VPN appliances that are being actively exploited in a chain by threat actors. The vulnerabilities, which include an authentication bypass, remote code execution, and privilege escalation, have been added to CISA's Known Exploited Vulnerabilities Catalog, urging immediate mitigation.