CVE-2026-111357: listed in the CISA KEV catalog CVE-2026-111357 · CVSS 7.0 HIGH · KEV 2026-10-30
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.
Is CVE-2026-111357 exploited? Listed in the CISA KEV catalog on 2026-10-30. Federal remediation due 2026-11-02. Public exploit code: none found in monitored sources. Which products and versions are affected? Ivanti · Connect Secure · 22.8R2.4 Is there a patch? Ivanti's record doesn't name a fixed version.
What PlainSec published about CVE-2026-111357 Primary sources What this record does not say No EPSS score. No patch identifier. KEV and EPSS are re-checked daily. Record last updated 2026-10-31.
CVE-2026-111357: listed in the CISA KEV catalog CVE-2026-111357 · CVSS 7.0 HIGH · KEV 2026-10-30
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.
Is CVE-2026-111357 exploited? Listed in the CISA KEV catalog on 2026-10-30. Federal remediation due 2026-11-02. Public exploit code: none found in monitored sources. Which products and versions are affected? Ivanti · Connect Secure · 22.8R2.4 Is there a patch? Ivanti's record doesn't name a fixed version.
What PlainSec published about CVE-2026-111357 Primary sources What this record does not say No EPSS score. No patch identifier. KEV and EPSS are re-checked daily. Record last updated 2026-10-31.