High severity8.6NVD Advisory· Published Oct 13, 2026· Updated Oct 13, 2026

CVE-2026-104935

Description

Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ivanti/Connect Securellm-fuzzy
Range: <25.1.3.0, except 22.7R2.14

Patches

Vulnerability mechanics

References

hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935nvd
www.cisa.gov/known-exploited-vulnerabilities-catalognvd

News mentions

Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)
Rapid7 Blog · Oct 13, 2026
Ivanti Connect Secure 0-Day Vulnerability Actively Exploited in the Wild
Cyber Security News · Oct 13, 2026
A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days
Volexity · Oct 13, 2026

cvss	0.559
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000