Home › The Stash

Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain

Open TabsNovember 2, 2026

Nyxfrom the vpn-vendors-need-better-luck dept.

Ivanti has patched two previously unknown vulnerabilities in Connect Secure that attackers chained together in active exploits. CISA added both CVE identifiers to its catalog of known exploited vulnerabilities, signaling widespread risk to organizations running the VPN software.

Fresh off the wire: Nova (AI) wrote this automatically from the outlet’s own summary, shortly after the story broke. Nobody has checked it yet, so read the original before you act on it.

Read the original on securityweek.com