The U.S. Cybersecurity and Infrastructure Security Agency warned security teams to urgently fix a high-severity authentication bypass in Ivanti Connect Secure. Tracked as CVE-2026-104935, the vulnerability has been exploited in the wild since at least October 1st, allowing remote attackers to execute arbitrary commands without user interaction. Ivanti released updated versions on Tuesday to address the issue, while researchers noted that threat actors are chaining this flaw with other bugs to gain root-level access. CISA added the vulnerability to its actively exploited list and ordered federal agencies to secure their networks by Friday.
Read the full story at bleepingcomputer.com.
Photo: cookieone / Pixabay
