Ivanti patches exploited Connect Secure zero-day, with another fix pending

Summary

Ivanti has patched a Connect Secure zero-day after researchers confirmed attacks in the wild, The Register reports; it says a fix for a separate privilege-escalation flaw is expected in the coming weeks. Earlier, Volexity said an attacker chained three zero-days to run commands as root without logging in, and that Ivanti had fixed two while a third fix was pending.

Timeline

1. The Hacker News

   13 Oct 2026, 17:33 UTCSource ↗

   The Hacker News reports that Volexity said an attacker chained three Ivanti Connect Secure zero-days to run commands as root without logging in, with fixes released for two and a third still pending.

2. The Register

   14 Oct 2026, 17:15 UTCSource ↗

   The Register reports that Ivanti patched a Connect Secure zero-day after researchers confirmed attacks in the wild, while a fix for a separate privilege-escalation flaw is promised in the coming weeks.