Mmastodon TechnologyCybersecurity first seen 13 h ago, last 13 h ago, peak #1

Critical Authentication Bypass Reported in Ivanti Connect Secure VPN

Original: (cyberunit.com) Critical Ivanti Connect Secure VPN Vulnerability (CVE-2026-104935): Authentication Bypass Enables Remote

Security researchers are warning organizations to patch Ivanti Connect Secure VPN appliances immediately after disclosure of CVE-2026-104935, a critical authentication bypass flaw. The vulnerability is said to allow remote attackers to execute commands and steal credentials without valid authentication. Security commentators are urging rapid patching, reflecting Ivanti's history of heavily exploited VPN vulnerabilities.

Why now: Ivanti VPN flaws have historically been exploited at scale, so defenders are rushing to assess and patch the newly disclosed bug.

IvantiCVE-2026-104935Ivanti Connect Secure VPNcyberunit.com

Open on mastodon →

Evidence

• (cyberunit.com) Critical Ivanti Connect Secure VPN Vulnerability (CVE-2026-104935): Authentication Bypass Enables Remote Command Execution and Credential Theft In brief - This article warns organizations to immediately patch a critical authentication bypass vulnerability… · orlysec@swecyb.com · 2

API: https://socialmediatrends-api.osmike.com/v1/trends/2255091