Skip to main content

Ivanti Releases Security Updates for Connect Secure

CVE-2026-104935 may allow unauthenticated remote code execution on affected Ivanti Connect Secure appliances

Threat ID:
CC-4866
Threat Severity:
Medium
Published:
13 October 2026 4:43 PM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

CVE-2026-104935 may allow unauthenticated remote code execution on affected Ivanti Connect Secure appliances

Affected platforms

The following platforms are known to be affected:

Ivanti Connect Secure

  • All prior to 25.1.1.1
  • All prior to 25.1.2.2
  • All prior to 22.8R2.4

Threat details

Exploitation of CVE-2026-104935

Ivanti has stated that it is aware of exploitation of CVE-2026-104935 in the wild. The NHS England National CSOC assesses further exploitation as highly likely.

Introduction

Ivanti has released a security advisory to address a vulnerability in Ivanti Connect Secure. Successful exploitation could allow a remote unauthenticated attacker to execute arbitrary commands on vulnerable systems.

  • CVE-2026-104935 - 'Authentication Bypass by Spoofing' vulnerability - CVSSv3.0 Score: 8.6

Remediation advice

Affected organisations are encouraged to review Ivanti advisory Security Advisory Ivanti Connect Secure (CVE-2026-104935) and apply the relevant update as soon as possible

Last edited: 13 October 2026 4:43 pm