Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Rapid7 Version 1 original current

Imported from official source

On October 13, 2026, Ivanti published a security advisory for CVE-2026-104935, a high-severity authentication bypass by spoofing (CWE-290) affecting Ivanti Connect Secure (ICS). The vulnerability has a CVSSv3.0 score of 8.6 and allows a remote, unauthenticated attacker to execute arbitrary commands. …

This version

Version
1 of 1
Recorded
October 13, 2026 18:02
Change
Initial
Content hash
d229ed02499011b0e1f19e216e1d47a5
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.