Critical Ivanti VPN Flaw Exploited in the Wild — Patch Immediately

Security researchers have confirmed active exploitation of a critical zero-day vulnerability (CVE-2026-8841) in Ivanti Connect Secure VPN appliances. The flaw allows an unauthenticated attacker to execute arbitrary code on the device.

CISA has added the vulnerability to its Known Exploited Vulnerabilities catalog and issued an emergency directive requiring federal agencies to patch within 48 hours.

Ivanti has released a patch. Organizations running Connect Secure should apply it immediately and check logs for signs of compromise dating back to October 15.