Section

Ivanti

Cybersecurity

CISA adds two exploited Ivanti Connect Secure flaws to KEV catalogue

CISA has added CVE-2026-111357 and CVE-2026-118527 to its Known Exploited Vulnerabilities catalogue following active exploitation of Ivanti Connect Secure VPN appliances.

October 31, 2026

Cybersecurity

Ivanti Sentry flaw scores 10.0 as attackers backdoor appliances

CVE-2026-10520 lets unauthenticated attackers gain root on Ivanti Standalone Sentry; researchers say exposed appliances are already being backdoored.

July 10, 2026