CERT24Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root AccessLoading data…
CERT24Threat Observatory
Period

Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

CISA added two vulnerabilities affecting Ivanti Connect Secure to its Known Exploited Vulnerabilities catalog following active exploitation in the wild. The flaws were used together with the authentication-bypass vulnerability CVE-2026-104935 to achieve unauthenticated root-level code execution.

← Back to intelligence

Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

CISA added two vulnerabilities affecting Ivanti Connect Secure to its Known Exploited Vulnerabilities catalog following active exploitation in the wild. The flaws were used together with the authentication-bypass vulnerability CVE-2026-104935 to achieve unauthenticated root-level code execution.