Medium 1 exploited CVE WID-SEC-2026-3989 1 CVE

Ivanti Connect Secure: Schwachstelle ermöglicht Privilegieneskalation

Published Oct 15, 2026 · Updated Oct 15, 2026 · de-DE

Vendor: ivanti Product: Connect Secure

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Ivanti Connect Secure ausnutzen, um seine Privilegien zu erhöhen.

Product

Connect Secure bietet TLS- und mobile VPN-Lösungen.

Vulnerabilities 1

High 7.0

CVE-2026-111357 Exploited

Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, l…

ivanti Connect Secure Network devices

Oct 15, 2026
KEV Oct 30, 2026

Revision history

2026-10-15 #1
Initiale Fassung

References

GitHub Security Advisory GHSA-fhw5-mpvj-x89m vom 2026-10-15
https://github.com/advisories/GHSA-fhw5-mpvj-x89m
Volexity Blog vom 2026-10-15
https://www.volexity.com/blog/2026/10/13/a-series-of-unauthenticated-events-chained-exploitation-of-ivanti-connect-secure-zero-days/
Ivanti Security Advisory CVE-2026-104935
https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935?language=en_US