{"id":"CVE-2026-111357","url":"https://compromised.live/t/CVE-2026-111357","kind":"exploited_vuln","tier":1,"severity":"high","title":"Ivanti Connect Secure: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability","summary":"An attacker who already has a login on Ivanti Connect Secure can skip a required check and gain higher privileges, and this flaw is being actively exploited. Ivanti Connect Secure. Apply the vendor's update now and check for signs of compromise.","summary_source":"ai","affected":[],"epss":null,"kev":{"date_added":"2026-10-30","due_date":"2026-11-02","ransomware":false},"first_seen":"2026-11-03T21:55:44.095Z","updated_at":"2026-11-03T21:55:44.095Z","status":"active","details":"Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-118527.","aliases":["CVE-2026-111357"],"sources":[{"name":"kev","id":"CVE-2026-111357","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111357"}]}