Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.
| Vendor | Product | Versions |
|---|---|---|
| ivanti | connect_secure | 22.8R2.4, 22.8R2.5, 25.1.1.2 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| ivanti | connect secure | cert_advisory | 90% |
Loading…
Updated exploit and active exploitation status to true, added patched version 22.8R2.6, and added 'authenticated-privilege-escalation' tag confirming the nature of the vulnerability in the attack chain.
Updated affected versions to include 22.8R2.5 and 25.1.1.2, confirmed exploit availability and active exploitation in the wild, added patch version 22.8R2.6, and added CISA KEV confirmation tag.
Updated CVSS score from 7.0 to 8.8 and severity from HIGH to CRITICAL based on official CISA assessment.
Updated CVSS score from 7.0 to 8.8, severity from HIGH to CRITICAL, confirmed active exploitation, and added CISA KEV catalog designation with chained exploit context.
Initial creation
