poslední zpráva
SPOJENO AI KEV ✓ EPSS 0.89
Ivanti patches two more Connect Secure zero-days chained in attacks
Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at least October 1. [...]
CVE v události 1
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-104935 | 8.6 3.1 · ivanti | KEV ✓ | 0.89 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 8.6.
Tahle CVE jsem vytáhl z širšího textu článku: CVE-2023-46805, CVE-2024-21887, CVE-2024-21893, CVE-2025-0282, CVE-2025-22457, CVE-2026-111357, CVE-2026-118527. Neukazuju u nich proto fakta z katalogů výše, a to preventivně, protože článek se na ně mohl jen odkazovat, třeba jako na starší kauzu.
Jak se o tom psalo 10
-
· BleepingComputer US nadpis události
Ivanti patches two more Connect Secure zero-days chained in attacks
Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at least October 1. [...]
-
· zachyceno · CERT-FR – avis FR
Multiples vulnérabilités dans Ivanti Connect Secure (02 novembre 2026)
De multiples vulnérabilités ont été découvertes dans Ivanti Connect Secure. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un contournement de la politique de sécurité. Ivanti indique que les vulnérabilités CVE-2026-104935,...
-
· NKI Maďarsko HU
Riasztás az Ivanti Connect Secure és a Microsoft Windows Shell sérülékenységeiről
A Nemzetbiztonsági Szakszolgálat Nemzeti Kiberbiztonsági Intézet riasztást ad ki az Ivanti Connect Secure terméket, valamint a Microsoft Windows Shell komponenst érintő sérülékenységek kapcsán, azok aktív kihasználása, valamint az érintett termékek széles körű használata miatt. Az Ivanti 2026. október 13-án biztonsági közleményt adott ki a Connect Secure terméket érintő, CVE-2026-104935 azonosítójú, magas kockázatú sérülékenységről. A hiba […]
-
· CSIRT Itálie (ACN) IT
Ivanti October Security Update
Ivanti ha rilasciato gli aggiornamenti di sicurezza di ottobre che risolvono 7 vulnerabilità, di cui 2 con gravità “critica” e 3 con gravità “alta”, in alcuni prodotti. Tra queste si evidenzia la CVE-2026-104935 - riguardante il prodotto Connect Secure (ICS) e di tipo "Authentication Bypass by Spoofing" - per la quale è stato rilevato lo sfruttamento attivo in rete.
-
· zachyceno · NCSC-FI FI
Ivanti Connect Secure -tuotteissa haavoittuvuutta käytetty hyväksi
Classification: Critical, Solution: Official Fix, Exploit Maturity: Functional, CVSSv3.1: 8.6, CVEs: CVE-2026-104935, Summary: Haavoittuvuus koskee Ivanti Connect Secure -tuotteeseen versioita 22.8R2.4 ja sitä vanhempia 22.8-haaran versioita sekä versioita 25.1.1.1 ja 25.1.2.2 ja vanhempia versioita kyseisissä ohjelmistohaaroissa. Ivantin mukaan versio 22.7R2.14 ja sitä vanhemmat 22.7-haaran versiot eivät ole haavoittuvia. Ivantin mukaan haavoittuvuus ei koske versiota 22.7R2.14 eikä sitä…
-
· zachyceno · CERT-FR – alerty FR
Vulnérabilité dans Ivanti Connect Secure (ICS) (14 octobre 2026)
Une vulnérabilité a été découverte dans Ivanti Connect Secure (ICS). Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un contournement de la politique de sécurité. Ivanti indique que cette vulnérabilité CVE-2026-104935 est...
-
· Rapid7 US
Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)
Overview On October 13, 2026, Ivanti published a security advisory for CVE-2026-104935, a high-severity authentication bypass by spoofing (CWE-290) affecting Ivanti Connect Secure (ICS). The vulnerability has a CVSSv3.0 score of 8.6 and allows a remote, unauthenticated attacker to execute arbitrary commands. Ivanti reports that exploitation in the wild has already occurred prior to disclosure, affecting a limited number of customers. This indicates that exploitation has been occurring as a zero…
-
· Volexity US
A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days
Volexity has identified active in-the-wild exploitation of a vulnerability chain allowing unauthenticated remote code execution in Ivanti Connect Secure VPN devices. Ivanti has published an advisory providing upgrade instructions to customers. Systems exhibiting signs of compromise, such as attempts to move laterally originating from the ICS VPN device, should be forensically investigated to ensure no breach has occurred. In the first week of October 2026, Volexity discovered an unknown threat…
-
· zachyceno · CISA Advisories US
CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure
CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA is aware of cyber threat actors exploiting this zero-day authentication bypass vulnerability, which allows remote, unauthenticated execution of arbitrary commands, to conduct credential theft and data exfiltration. CISA added CVE-2026-104935 to its Known Exploited Vulnerabilities (KEV) Catalog on…
-
· zachyceno · CISA KEV US
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability (CVE-2026-104935)
CISA added CVE-2026-104935 to the Known Exploited Vulnerabilities catalog. Affected product: Ivanti Connect Secure. Remediation due date: 2026-10-16.