Ivanti Connect Secure · week of 26 Oct 2026

Ivanti Connect Secure security note

Records on this stack that changed between 26 Oct 2026 and the following Monday. Versions come from the stored ranges. A quiet week is not proof the stack is clear.

What changed

CVE-2026-111357 — Patch now
Ivanti Connect Secure and Policy Secure Inclusion of Functionality from Untrusted Control Sphere
Affected < 25.1.1.3

What we still do not know

CVE-2026-118527 — Patch now
Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
No version range is stored, so an installed version cannot be checked.

Share this note

Ivanti Connect Secure security note, week of 26 Oct 2026: 1 record has a version a customer can check, and 1 still does not. https://zerodayfindings.com/technologies/ivanti/notes/2026-W44