CVE-2026-104935 — Vulnerability intelligence

Ivanti — Connect Secure

Published: 2026-10-13T15:31:07.757Z

CVSS

8.6

CISA KEV

Known exploitation

Original source text (not a translation)

Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.

Sources

• Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
• Original advisory
• CVE-2026-104935