Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

T1Critical 100Covered by 1 source · first reported by Rapid7 at 13 Oct, 17:06 UTC

Overview On October 13, 2026, Ivanti published a security advisory for CVE-2026-104935, a high-severity authentication bypass by spoofing (CWE-290) affecting Ivanti Connect Secure (ICS). The vulnerability has a CVSSv3.0 score of 8.6 and allows a remote, unauthenticated attacker to execute arbitrary…

security

Sources

• T1Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Rapid713 Oct, 17:06

Vulnerabilities

• CVE-2026-104935