{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:36.715Z","products":["ivanti"],"actNowTotal":2,"results":[{"query":"ivanti","matched":2,"actNow":2,"events":[{"id":"kev-2026-10-30-ivanti-connect-secure","url":"https://securitythreatpulse.com/events/kev-2026-10-30-ivanti-connect-secure","title":"Ivanti Connect Secure: 2 flaws used in attacks; attackers can get in without a password","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is 7 days old, so many systems are likely still unpatched. It affects a product that faces the internet or gives remote access.","tier":"today","rankScore":6,"rankWhy":["Exploitation is confirmed by an authoritative source.","The product faces the internet or gives remote access.","The confirmation is 12 days old."],"rulesVersion":"v3","ladder":{"talk":"confirmed","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-111357","CVE-2026-118527"],"vendor":"Ivanti","product":"Connect Secure","affectedProducts":[{"kind":"direct","slug":"ivanti/connectsecure","vendor":"Ivanti","product":"Connect Secure","evidence":["kev","cpe"],"vendorKey":"ivanti","productKey":"connectsecure"}],"category":{"id":"edge","label":"VPN, firewall or gateway","why":"It sits at the edge of your network and faces the internet, so attackers can reach it directly.","doThis":"If you have it, patch it today. If you cannot, block access to it from the internet until you can."},"summary":"Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-118527.","cvss":7,"epss":0.00822,"exploitMaturity":"none","kevListed":true,"kevDateAdded":"2026-10-30","kevDueDate":"2026-11-02","firstSeenAt":"2026-10-30T00:00:00.000Z","updatedAt":"2026-11-11T00:00:06.173Z","newestEvidenceAt":"2026-11-08T13:00:20.484Z"},{"id":"kev-2026-10-13-ivanti-connect-secure","url":"https://securitythreatpulse.com/events/kev-2026-10-13-ivanti-connect-secure","title":"Ivanti Connect Secure: attackers can get in without a password","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is 28 days old, so many systems are likely still unpatched. Ready-made attack tools are public. It affects a product that faces the internet or gives remote access. The exploit prediction score is 89%.","tier":"now","rankScore":6,"rankWhy":["Exploitation is confirmed by an authoritative source.","The product faces the internet or gives remote access.","Ready-made attack tools are public."],"rulesVersion":"v3","ladder":{"talk":"confirmed","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-104935"],"vendor":"Ivanti","product":"Connect Secure","affectedProducts":[{"kind":"direct","slug":"ivanti/connectsecure","vendor":"Ivanti","product":"Connect Secure","evidence":["kev","cpe"],"vendorKey":"ivanti","productKey":"connectsecure"}],"category":{"id":"edge","label":"VPN, firewall or gateway","why":"It sits at the edge of your network and faces the internet, so attackers can reach it directly.","doThis":"If you have it, patch it today. If you cannot, block access to it from the internet until you can."},"summary":"Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.","cvss":8.6,"epss":0.88936,"exploitMaturity":"weaponized","kevListed":true,"kevDateAdded":"2026-10-13","kevDueDate":"2026-10-16","firstSeenAt":"2026-10-13T00:00:00.000Z","updatedAt":"2026-11-10T16:00:06.550Z","newestEvidenceAt":"2026-11-03T15:19:11.536Z"}]}]}