Attackers Chain Three Ivanti Connect Secure Flaws for Unauthenticated Root Access

CVE-2026-111357 (CVSS 8.8) and two additional Ivanti Connect Secure vulnerabilities chained for unauthenticated root access. CISA added to KEV catalog citing active wild exploitation.