Public preview. Built from real public data on November 9, 2026, 5:41 AM UTC.
Securidigm Watch Transportation cyber intel
Home / Items
Cybersecurity advisory

CISA Urges Patching Newly Exploited Vulnerabilities in Ivanti Connect Secure

CISA-ALERT-2026-10-13-cisa-urges-patching-newly-exploited-vulnerabilities-ivanti · CISA · October 13, 2026

Summary

Update October 30, 2026 : CISA has updated this Alert to: (1) include CVE-2026-111357 and CVE-2026-118527 and reflect their addition to the Known Exploited Vulnerabilities (KEV) Catalog on October 30, 2026; and (2) update the affected Ivanti Connect Secure versions. CISA is aware of Ivanti’s disclosure of newly exploited vulnerabilities, CVE-2026-104935 , CVE-2026-111357 , and CVE-2026-118527 , affecting Ivanti Connect Secure versions 25.1.1.2 and prior, 25.1.2.2 and prior, and 22.8R2.5 and prior. CISA is aware of cyber threat actors exploiting these vulnerabilities, which allows remote, unauthenticated execution of arbitrary commands, to conduct credential theft and data exfiltration. CISA added CVE-2026-104935 to its KEV Catalog on Oct. 13, 2026, and CVE-2026-111357 and CVE-2026-118527 on Oct. 30, 2026.

From CISA, quoted as published. Check the source before acting.

Why it's on these mode pages

  • Maritime: Vendor named in the text, vendor table: Ivanti (network and remote-access gear used in every mode, all modes) (matched by rule)
  • Pipeline: Vendor named in the text, vendor table: Ivanti (network and remote-access gear used in every mode, all modes) (matched by rule)
  • Freight rail: Vendor named in the text, vendor table: Ivanti (network and remote-access gear used in every mode, all modes) (matched by rule)
  • Passenger rail and transit: Vendor named in the text, vendor table: Ivanti (network and remote-access gear used in every mode, all modes) (matched by rule)
  • Highway and motor carrier: Vendor named in the text, vendor table: Ivanti (network and remote-access gear used in every mode, all modes) (matched by rule)
  • Postal and parcel: Vendor named in the text, vendor table: Ivanti (network and remote-access gear used in every mode, all modes) (matched by rule)

Change history

  1. November 9, 2026: First collected by Watch

Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com