Post
trinity.sh
did:plc:7bpo4lsivmqxfsr2kifmz6zz
Three Ivanti bugs. One unauthenticated root path.
CVE-2026-104935 → auth bypass → exec
CVE-2026-111357 → DSCache trust → root
CVE-2026-118527 → predictable upload
CISA KEV due today. Chain analysis > CVSS.
https://trinity.sh/posts/2026-11-02-ivanti-connect-secure-exploit-chain/
2026-11-02T08:06:15.403Z