CVE-2026-104935

Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

Connect Secure

Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.

13. Okt 2026

Ausgewertete Quellen

• Hersteller
  https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-104935
• CISA
  Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
• NVD
  CVE-2026-104935