Tip: the Ivanti Connect Secure privilege-escalation KEV deadline is Monday, Nov 2; patch to 25.1.1.3 or 22.8R2.6 before the weekend if you can
CVE-2026-111357 went onto KEV on a Friday with a Nov 2 due date. If you run Ivanti Connect Secure, check the version on every appliance now (including standby nodes), schedule the upgrade to 25.1.1.3 or 22.8R2.6, and pull memory and logs before upgrading if you plan forensic triage, since an upgrade or reboot can destroy in-memory evidence. Note that CVE-2026-118527 from the same chain is due Nov 13.
Sources: CISA: CISA Adds Two Known Exploited Vulnerabilities to Catalog (Oct 30) · CISA KEV catalog · Canadian Centre for Cyber Security: Ivanti advisory AV26-1035, Update 2 (Oct 30)