CISA Directs Federal Agencies to Remediate Exploited Ivanti Connect Secure Vulnerabilities

The Cybersecurity and Infrastructure Security Agency (CISA) has added two new Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527) to its Known Exploited Vulnerabilities catalog, directing federal agencies to remediate them. These flaws have been exploited as zero-days in conjunction with another vulnerability, allowing attackers to gain a foothold in targeted organizations' networks and engage in credential theft.