cve-2026-111357
HIGH CVSS 7.0 euvd_kev
Description
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.
Timeline
- Published
- Oct 15, 2026, 8:56:58 PM
- Last Modified
- Oct 31, 2026, 3:56:17 AM
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"aliases": "GHSA-fhw5-mpvj-x89m\nCVE-2026-111357\n",
"cvss": 7.0,
"datePublished": "Oct 15, 2026, 8:56:58 PM",
"dateUpdated": "Oct 31, 2026, 3:56:17 AM",
"description": "Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.",
"euvdId": "EUVD-2026-102437",
"exploitedSince": "Oct 30, 2026, 12:00:00 AM",
"id": "CVE-2026-111357",
"kev_catalogs": [
"euvd"
],
"severity": "HIGH",
"source": "euvd_kev",
"title": "EUVD-2026-102437"
}
Enrichment data
Aggregated bundle (all enrichments)