Zero-day vulnerability in Ivanti Connect Secure: update immediately

A zero-day vulnerability, CVE-2026-104935, has been found in Ivanti Connect Secure. An attacker can exploit it remotely without logging in. Ivanti reports that the vulnerability has already been exploited at a limited number of customers.