Missing Authentication for Critical Function Vulnerability
Exploited in the wild. CISA added it to its Known Exploited Vulnerabilities list on 30 Oct 2026.
0.53%
Reading the vendor advisory
Fix it in your code
Each opens with a short prompt that points at Global Hack Map's public runbook for CVE-2026-111357. Nothing runs until you send it.
Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-118527.
You are affected if
The fix