Veille CVE

Recherche « Ivanti Connect Secure »

2 CVE

  1. CVE-2026-111357 7.0 Élevée

    Ivanti Connect Secure

    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.

  2. CVE-2026-104935 8.6 Élevée Exploitée

    Ivanti Connect Secure

    Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.