Vulnerabilities · InfosecFeed Brief
CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure
Vulnerabilities
What you need to know
CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA is aware of cyber threat actors exploiting this zero-day authentication bypass vulnerability, which allows remote, unauthenticated execution of arbitrary…
Source transparency
Read the original report at CISA Alerts ↗
This is an InfosecFeed curated brief based on reporting from CISA Alerts. InfosecFeed does not claim ownership of the original reporting.