---
title: Tip: the Ivanti Connect Secure privilege-escalation KEV deadline is Monday, Nov 2; patch to 25.1.1.3 or 22.8R2.6 before the weekend if you can | ctxsec
url: https://ctxsec.com/items/tip-ivanti-ics-cve-2026-111357-kev-due-monday-nov-2
description: ""
status: "official due dates (CISA KEV)"
published: 2026-10-30
---

> 

[← Tips & Guides](/tips) · [markdown](/items/tip-ivanti-ics-cve-2026-111357-kev-due-monday-nov-2.md)

official due dates (CISA KEV)

2026-10-30

### Tip: the Ivanti Connect Secure privilege-escalation KEV deadline is Monday, Nov 2; patch to 25.1.1.3 or 22.8R2.6 before the weekend if you can

CVE-2026-111357 went onto KEV on a Friday with a Nov 2 due date. If you run Ivanti Connect Secure, check the version on every appliance now (including standby nodes), schedule the upgrade to 25.1.1.3 or 22.8R2.6, and pull memory and logs _before_ upgrading if you plan forensic triage, since an upgrade or reboot can destroy in-memory evidence. Note that CVE-2026-118527 from the same chain is due Nov 13.

Sources: [CISA: CISA Adds Two Known Exploited Vulnerabilities to Catalog (Oct 30)](https://www.cisa.gov/news-events/alerts/2026/10/30/cisa-adds-two-known-exploited-vulnerabilities-catalog) · [CISA KEV catalog](https://www.cisa.gov/known-exploited-vulnerabilities-catalog) · [Canadian Centre for Cyber Security: Ivanti advisory AV26-1035, Update 2 (Oct 30)](https://www.cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av26-1035)