Known Exploited Vulnerabilities October 13, 2026 · CISA KEV Catalog

CVE-2026-104935: Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2026-104935Ivanti

Related

CVE-2026-111357: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability Known Exploited Vulnerabilities · Oct 30, 2026

CVE-2026-118527: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability Known Exploited Vulnerabilities · Oct 30, 2026

CVE-2026-10520: Ivanti Sentry OS Command Injection Vulnerability Known Exploited Vulnerabilities · Jun 11, 2026