Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN

T2Critical 100Covered by 1 source · first reported by SecurityWeek at 13 Oct, 18:43 UTC

CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution with elevated privileges. The post Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN appeared first on SecurityWeek.

security

Sources

• T2Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPNSecurityWeek13 Oct, 18:43

Vulnerabilities

• CVE-2026-104935