Historical version

This is version 2, as it stood on . It is not what this organization currently publishes — read the current version.

Ivanti security advisory (AV26-1035)

Canadian Centre for Cyber Security Version 2 imported change

Imported from official source

Serial number: AV26-1035Date: October 13, 2026 As of October 13, 2026, Ivanti is affected by vulnerabilities in the following products: Ivanti Connect Secure Version 25.1.1.1 and prior Version 25.2.2 and prior Version 22.8R2.4 and prior Ivanti Neurons Patch for Intune Versions prior to September 16, 2026 Ivanti Xtraction Version 2026.2.1 and prior On October 13, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-104935 to their Known Exploited Vulnerabilities (KEV) Database. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security Advisory Ivanti Connect Secure (CVE-2026-104935) Security Advisory Ivanti Xtraction (Multiple CVEs) Security Advisory Ivanti Neurons Patch for Intune October 2026 (CVE-2026-109412) Ivanti Security Advisories CISA KEV: CVE-2026-104935

This version

Version
2 of 4
Recorded
October 14, 2026 13:00
Change
Imported change
Content hash
1ee5329b5eecfeededd193386864380e
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.