CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure

CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure
Advisory ID: node-25619
CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935 , affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA is aware of cyber threat actors exploiting this zero-day authentication bypass vulnerability, which allows remote, unauthenticated execution of arbitrary commands, to conduct credential theft and dat
Severity: moderate
Published (UTC): 2026-10-13T12:00:00.000Z
Source: CERT
Original source: https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-urges-patching-newly-exploited-vulnerability-ivanti-connect-secure