CVE-2026-111357

Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026...

CVE-2026-111357

The Ivanti Connect Secure 22.8R2.4 software contains a vulnerability where the dsinvoked broker improperly trusts DSCache configuration data . This flaw allows for privilege escalation to root and was exploited in the wild in October 2026. The vulnerability is associated with CWE-829 (Inclusion o...