CVE-2026-111357

Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.

Affected

Ivanti · Connect Secure

CVSS v3.1 MITRE

7.0 HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.25% chance of exploitation in the next 30 days, 15th percentile

Published

2026-10-15

Updated

2026-10-16

Proof-of-concept exploits (1)

• https://www.volexity.com/blog/2026/10/13/a-series-of-unauthenticated-events-chained-explo…

References

• CVE Record
• NVD entry