CVE-2026-104935

Published 13 October 2026 · tracked since 13 October 2026

Description

Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-109573 HIGH 8.1
• CVE-2026-84312 HIGH 7.1
• CVE-2026-41210 MEDIUM 6.5
• CVE-2026-84316 HIGH 8.8
• CVE-2026-84317 HIGH 8.8
• CVE-2026-84318 HIGH 8.8
• CVE-2026-84319 HIGH 8.3
• CVE-2026-84320 MEDIUM 6.3
• CVE-2026-84321 MEDIUM 5.4
• CVE-2026-84360 HIGH 8.1

→ Open the live CVE board · all tools