Mmastodon TechnologyCybersecurity first seen 5 d ago, last 5 d ago, peak #6

Rapid7 reports new Ivanti Connect Secure zero-days exploited in the wild

Original: New. Rapid7: Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527) https:/

Security firm Rapid7 has disclosed two additional zero-day vulnerabilities in Ivanti Connect Secure, CVE-2026-111357 and CVE-2026-118527, and says both are being actively exploited by attackers. The finding adds to a string of recent Ivanti VPN flaws, prompting urgent patching guidance for organisations running affected appliances.

Why now: Active exploitation of widely used VPN appliances raises immediate risk for organisations relying on Ivanti Connect Secure.

Rapid7IvantiIvanti Connect Secure

Open on mastodon →

Evidence

• New. Rapid7: Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527) https://www. rapid7.com/blog/post/etr-addit ional-ivanti-connect-secure-zero-days-exploited-in-the-wild-cve-2026-111357-cve-2026-118527/ @ Rapid7Official # infosec #… · AAKL@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/4643637