Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

CVE v události 1

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 8.6.

Jak se o tom psalo 3

1. 13. 10. 2026 19:06 · Rapid7 US nadpis události

   Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

   Overview On October 13, 2026, Ivanti published a security advisory for CVE-2026-104935, a high-severity authentication bypass by spoofing (CWE-290) affecting Ivanti Connect Secure (ICS). The vulnerability has a CVSSv3.0 score of 8.6 and allows a remote, unauthenticated attacker to execute arbitrary commands. Ivanti reports that exploitation in the wild has already occurred prior to disclosure, affecting a limited number of customers. This indicates that exploitation has been occurring as a zero…

2. 13. 10. 2026 17:32 · Volexity US

   A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days

   Volexity has identified active in-the-wild exploitation of a vulnerability chain allowing unauthenticated remote code execution in Ivanti Connect Secure VPN devices. Ivanti has published an advisory providing upgrade instructions to customers. Systems exhibiting signs of compromise, such as attempts to move laterally originating from the ICS VPN device, should be forensically investigated to ensure no breach has occurred. In the first week of October 2026, Volexity discovered an unknown threat…

3. 13. 10. 2026 · zachyceno 17:00 · CISA KEV US

   Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability (CVE-2026-104935)

   CISA added CVE-2026-104935 to the Known Exploited Vulnerabilities catalog. Affected product: Ivanti Connect Secure. Remediation due date: 2026-10-16.