{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "ivanti connect_secure: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/ivanti--connect-secure/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/ivanti--connect-secure/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-111357/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-111357/",
   "title": "CVE-2026-111357 · ivanti connect_secure · disclosed",
   "content_text": "Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.",
   "date_published": "2026-10-15T20:56:58Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104935/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104935/",
   "title": "CVE-2026-104935 · ivanti connect_secure · disclosed · exploited",
   "content_text": "Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.",
   "date_published": "2026-10-13T15:31:07Z"
  }
 ]
}