Ivanti · Connect Secure
Updated November 6, 2026
A critical function in Connect Secure lacks proper authentication, allowing a locally authenticated user to elevate privileges. When combined with other Ivanti vulnerabilities, it can lead to full system takeover.
Elevated privileges can be used to bypass VPN controls, access sensitive resources, and install persistent malware.
Apply the vendor’s security patch; review and tighten local user permissions; audit for suspicious privilege changes post‑patch.
More active vulnerabilities