Ivanti patches two more Connect Secure zero-days chained in attacks

Ivanti has released security updates patching two more Connect Secure flaws, CVE-2026-111357 and CVE-2026-118527, that attackers have chained in zero-day attacks since at least October 1, BleepingComputer reports. Chained with an authentication bypass flaw patched last month, the flaws let attackers gain unauthenticated root-level access to the remote access gateways, and Shadowserver tracks more than 5,000 internet-exposed instances.