Topic

Cve 2026 111357

Coverage tagged cve 2026 111357.

Articles: 1
Desk: 1

Data graphic: Ivanti Connect Secure 22.8R2.5 is no longer enough: CISA now lists 22.8R2.5 and prior as affected, and on 30 October it added CVE-2026-111357 CVSS 3.1, 7.0 High and CVE-2026-118527 no NVD or CVE.org record to KEV. The diagram shows the chain per Volexity: welcome.cgi path bypass CVE-2026-104935 , wu.cgi upload race, dsinvoked trusts cache CVE-2026-111357 , then root.

highExploits Cve 2026 111357

CISA Adds Two More Ivanti Connect Secure Flaws to KEV as Links in the CVE-2026-104935 Exploitation Chain

CVE-2026-111357 (root via dsinvoked) and CVE-2026-118527 join KEV on 30 Oct. CISA now lists 22.8R2.5 as affected, so the earlier patch is not enough.

Oct 31 · 4 min