Zero-Day Vulnerability in Ivanti Connect Secure

THREAT INTELLIGENCE

Peer Review

4.8

Proven Trust

Dark blue circle with two overlapping checkmarks, one green and one light blue.

ISO 27001 text with a globe outline symbol on a black background.

2025 winner badge for Cyber Security Excellence Awards with gold and black design.

High

CVE-2026-104935

Ivanti

October 13, 2026

Executive Summary

Zero-day authentication bypass by spoofing, CVE-2026-104935 (CVSS 8.6), lets remote unauthenticated attackers execute arbitrary commands.

Key Details

Affected Platform

Ivanti Connect Secure

Attack Surface

Network accessible, unauthenticated

Recommended Action

Apply vendor patch

Affected Environment

Ivanti Connect Secure before 25.1.3.0, including 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior.

Operational Impact

Arbitrary command execution on the VPN gateway, putting remote access infrastructure and internal networks at risk.

Technical Root Cause

Authentication bypass by spoofing weakness in Connect Secure, tracked as CVE-2026-104935.

Recommended Mitigation

Upgrade to 25.1.1.2, 25.1.3.0, 25.1.3.1, or 22.8R2.5 after testing, as applicable to your branch.

Concerned about your exposure?

Our security experts can help you assess affected systems, validate risk and support a safe remediation plan.

Discuss Your Security Exposure Explore Managed Detection and Response

Assess your risk

Identify affected systems

Plan remediation

Practical, vendor-aligned guidance

Get expert support

From our 24/7 security team

Stay ahead of emerging threats

Get the latest threat intelligence and security advisories from Smarttech247.

Full Technical Report

Download the complete analysis, including detailed technical findings and references.

Download Full Report (PDF)

References

Ivanti Security Advisory, Volexity.