Ivanti Connect Secure CVE-2026-104935: Find impacted appliances

Ivanti Connect Secure (ICS) suffers a critical authentication-bypass vulnerability (CVE-2026-104935, CVSS 8.6) that enables remote unauthenticated attackers to execute arbitrary commands and fully compromise affected appliances; evidence shows active exploitation in the wild and the issue was added to the CISA Known Exploited Vulnerabilities catalog. The advisory lists affected 22.8 and 25.1 versions, provides upgrade paths (including 25.1.1.2, 25.1.3.0, and 22.8R2.5), recommends running integrity checks and reviewing IOCs, and urges rapid patching or migration.