CVE-2026-111357

The Ivanti Connect Secure 22.8R2.4 software contains a vulnerability where the dsinvoked broker improperly trusts DSCache configuration data . This flaw allows for privilege escalation to root and was exploited in the wild in October 2026. The vulnerability is associated with CWE-829 (Inclusion o...