Vulnerability
Published 2026-10-13
Verified 2026-10-17
Ivanti Connect Secure (CVE-2026-104935)
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability. Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
- Product
- Ivanti Connect Secure
- Exploited in Australia?
- unknown
Primary: NVD · Vendor: CISA KEV · CVE: CVE-2026-104935