CERT24CISA warns administrators about Ivanti Connect Secure flaw exploited as a zero-dayLoading data…
CERT24Threat Observatory
Period

CISA warns administrators about Ivanti Connect Secure flaw exploited as a zero-day

CISA said that the high-severity authentication-bypass vulnerability CVE-2026-104935 in Ivanti Connect Secure has been exploited in zero-day attacks since at least October 1. The vulnerability allows remote unauthenticated actors to execute arbitrary commands on targeted systems.

← Back to intelligence

CISA warns administrators about Ivanti Connect Secure flaw exploited as a zero-day

CISA said that the high-severity authentication-bypass vulnerability CVE-2026-104935 in Ivanti Connect Secure has been exploited in zero-day attacks since at least October 1. The vulnerability allows remote unauthenticated actors to execute arbitrary commands on targeted systems.