Ivanti · Connect Secure · VPN · CISA KEV · Zero-Day · Active Exploitation
CVE-2026-104935: Ivanti Connect Secure Zero-Day Exploited on Patched Appliances
Ivanti warned that CVE-2026-104935, an authentication bypass in Connect Secure, is exploited in the wild. Volexity saw a three-flaw chain reach root on a fully patched VPN, and the third flaw still has no fix.