U.S. CISA adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog
ID: ea51d499-54cd-55e3-8be5-0d8d823079a9
STIX ID: report--ea51d499-54cd-55e3-8be5-0d8d823079a9
Feed Name: Security Affairs
Threat Score
CISA has added Ivanti Connect Secure vulnerability CVE-2026-104935 (CVSS 8.6) to its Known Exploited Vulnerabilities catalog; the flaw is an authentication bypass by spoofing in ICS versions prior to 25.1.3.0 that can allow remote unauthenticated arbitrary command execution, has been exploited in the wild against a limited set of customers, and federal agencies are ordered to remediate by October 16, 2026.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.