As cited
Copy frozen at (site build).
vulnerabilities
CISA Urges Patching Newly Exploited Vulnerabilities in Ivanti Connect Secure
CISA added three remote code execution vulnerabilities in Ivanti Connect Secure to its Known Exploited Vulnerabilities Catalog after confirming active exploitation by threat actors. The flaws allow unauthenticated attackers to execute commands, steal credentials, and exfiltrate data from affected versions through October 30, 2026. Organizations must patch immediately and conduct forensics to detect potential compromise, as in-memory exploitation may evade standard detection tools.
Why it matters: Organizations running Ivanti Connect Secure 25.1.2.2, 25.1.1.2, or 22.8R2.5 and earlier face urgent risk of credential theft and data breach from active exploitation; immediate patching and forensic investigation are required.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CISA Urges Patching Newly Exploited Vulnerabilities in Ivanti Connect Secure
CISA added three remote code execution vulnerabilities in Ivanti Connect Secure to its Known Exploited Vulnerabilities Catalog after confirming active exploitation by threat actors. The flaws allow unauthenticated attackers to execute commands, steal credentials, and exfiltrate data from affected versions through October 30, 2026. Organizations must patch immediately and conduct forensics to detect potential compromise, as in-memory exploitation may evade standard detection tools.
Why it matters: Organizations running Ivanti Connect Secure 25.1.2.2, 25.1.1.2, or 22.8R2.5 and earlier face urgent risk of credential theft and data breach from active exploitation; immediate patching and forensic investigation are required.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CISA Urges Patching Newly Exploited Vulnerabilities in Ivanti Connect Secure
CISA added three remote code execution vulnerabilities in Ivanti Connect Secure to its Known Exploited Vulnerabilities Catalog after confirming active exploitation by threat actors. The flaws allow unauthenticated attackers to execute commands, steal credentials, and exfiltrate data from affected versions through October 30, 2026. Organizations must patch immediately and conduct forensics to detect potential compromise, as in-memory exploitation may evade standard detection tools.
Why it matters: Organizations running Ivanti Connect Secure 25.1.2.2, 25.1.1.2, or 22.8R2.5 and earlier face urgent risk of credential theft and data breach from active exploitation; immediate patching and forensic investigation are required.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CISA Urges Patching Newly Exploited Vulnerabilities in Ivanti Connect Secure
CISA added three remote code execution vulnerabilities in Ivanti Connect Secure to its Known Exploited Vulnerabilities Catalog after confirming active exploitation by threat actors. The flaws allow unauthenticated attackers to execute commands, steal credentials, and exfiltrate data from affected versions through October 30, 2026. Organizations must patch immediately and conduct forensics to detect potential compromise, as in-memory exploitation may evade standard detection tools.
Why it matters: Organizations running Ivanti Connect Secure 25.1.2.2, 25.1.1.2, or 22.8R2.5 and earlier face urgent risk of credential theft and data breach from active exploitation; immediate patching and forensic investigation are required.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CISA Urges Patching Newly Exploited Vulnerabilities in Ivanti Connect Secure
CISA added three remote code execution vulnerabilities in Ivanti Connect Secure to its Known Exploited Vulnerabilities Catalog after confirming active exploitation by threat actors. The flaws allow unauthenticated attackers to execute commands, steal credentials, and exfiltrate data from affected versions through October 30, 2026. Organizations must patch immediately and conduct forensics to detect potential compromise, as in-memory exploitation may evade standard detection tools.
Why it matters: Organizations running Ivanti Connect Secure 25.1.2.2, 25.1.1.2, or 22.8R2.5 and earlier face urgent risk of credential theft and data breach from active exploitation; immediate patching and forensic investigation are required.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CISA Urges Patching Newly Exploited Vulnerabilities in Ivanti Connect Secure
CISA added three remote code execution vulnerabilities in Ivanti Connect Secure to its Known Exploited Vulnerabilities Catalog after confirming active exploitation by threat actors. The flaws allow unauthenticated attackers to execute commands, steal credentials, and exfiltrate data from affected versions through October 30, 2026. Organizations must patch immediately and conduct forensics to detect potential compromise, as in-memory exploitation may evade standard detection tools.
Why it matters: Organizations running Ivanti Connect Secure 25.1.2.2, 25.1.1.2, or 22.8R2.5 and earlier face urgent risk of credential theft and data breach from active exploitation; immediate patching and forensic investigation are required.
- Source published
- First seen by Cybersecurity Tracker