Privilege Escalation Vulnerability in Ivanti Connect Secure
CVE-2026-111357

7HIGH

Key Information:

Vendor

Ivanti
Status
Connect Secure
Vendor
CVE Published:
15 October 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-111357?

A significant vulnerability in Ivanti Connect Secure version 22.8R2.4 allows attackers to exploit issues in the way DSCache configuration data is handled by the dsinvoked broker. This flaw can lead to unauthorized privilege escalation to root level. Exploits for this vulnerability have already been observed in the wild, underscoring the urgency for users to implement security updates and mitigate potential threats to their systems.

Affected Version(s)

Connect Secure 22.8R2.4

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-111357 - Proof of Concept

References

https://www.volexity.com/blog/2026/10/13/a-series-of-unau...
third-party-advisory
https://hub.ivanti.com/s/article/Security-Advisory-Ivanti...
related

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.