TOPICS / 4 STORIES
Ivanti Connect Secure
Every Pandromeda story on Ivanti Connect Secure: news, explainers, comparisons and guides, newest first.
NewsIvanti Connect Secure CVE-2026-111357, CVE-2026-118527: Patch Now
CISA added two new Ivanti Connect Secure CVEs to its KEV catalog on October 30, separate from October's zero-day, with a federal patch deadline today.
NewsCVE-2026-104935: Ivanti Connect Secure Zero-Day Gives Root Access
A threat actor dubbed UTA0576 chained three Ivanti Connect Secure zero-days to gain unauthenticated root on fully patched VPN appliances, Volexity says.
NewsIvanti Connect Secure Zero-Day Puts CISA Deadline Today
Volexity caught attackers chaining three Ivanti Connect Secure zero-days for unauthenticated root access. CISA's patch deadline for CVE-2026-104935 is today.
NewsIvanti Connect Secure CVE-2026-104935: Patch Now, CISA Says
CISA confirms active exploitation of an authentication-bypass bug in Ivanti Connect Secure and gives federal agencies a three-day BOD 26-04 deadline to patch or disconnect.