CVE-2026-104935: Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
Summary
A critical vulnerability, CVE-2026-104935, has been identified in Ivanti Connect Secure. This flaw allows unauthenticated remote attackers to bypass authentication and execute arbitrary commands.
IFF Assessment
This vulnerability allows attackers to bypass authentication and execute arbitrary commands, posing a significant risk to sensitive systems.
Severity
The vulnerability allows remote, unauthenticated attackers to bypass authentication and execute arbitrary commands, indicating a high attack vector, high impact on confidentiality and integrity, and high exploitability.
CISA KEV: Listed as actively exploited. Federal patch due: October 16, 2026. Known ransomware use: Unknown.
Defender Context
Defenders need to urgently apply mitigations for Ivanti Connect Secure as per vendor instructions and CISA guidance. The high CVSS score and potential for arbitrary command execution make this a critical threat that could lead to widespread compromise or ransomware deployment.