Ivanti flaws added to CISA and Cyber Centre watch lists
Oct 30, 2026 · Summarized by Fundy Tech from Canadian Centre for Cyber Security
CISA added Ivanti vulnerabilities to its exploited list, and the Cyber Centre says to review links and apply updates when available. One flaw is reported as exploited in the wild.
Key points
- CISA added CVE-2026-104935, then CVE-2026-111357 and CVE-2026-118527.
- Open-source reporting says CVE-2026-111357 is being exploited in the wild.
- The Cyber Centre issued Ivanti advisory AV26-1035 on October 30, 2026.
Why it matters
If your business uses Ivanti products, this is a patch now issue. Exploited flaws can be used to break into systems before defences are updated. Households are less likely to be directly affected, but any organisation handling personal or payment data should move quickly. Delayed updates can increase the risk of service disruption or data theft.
Who’s affected: Ivanti users and administrators
What to do
- Check whether you use affected Ivanti products.
- Apply any available security updates as soon as possible.
- Review the Cyber Centre links for guidance.
Vulnerability IDs
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.