Ivanti patched one of the three flaws being used together. The fix was vulnerable to the other two
2026-10-31Security
CISA added two more Ivanti Connect Secure flaws on 30 October. Ivanti's advisory says the exploitation it saw used all three chained, and the versions it shipped in October as the fix are listed as affected by the new pair.