Mmastodon TechnologyCybersecurity first seen 3 d ago, last 3 d ago, peak #5

Ivanti confirms active exploitation of Connect Secure flaw

Original: 🚨 Rapid Response: Ivanti Connect Secure Authentication Bypass (CVE-2026-104935) Ivanti confirms active exploitation of a

Ivanti has confirmed that a high-severity authentication bypass vulnerability in its Connect Secure product, tracked as CVE-2026-104935, is being actively exploited in the wild. The flaw, rated CVSS 8.6, allows unauthenticated attackers to execute arbitrary commands on affected appliances. Security researchers are urging administrators to apply patches and check systems for compromise immediately.

Why now: Actively exploited enterprise VPN vulnerabilities are urgent incidents that security teams must respond to immediately.

IvantiIvanti Connect SecureCVE-2026-104935

Open on mastodon →

Evidence

• 🚨 Rapid Response: Ivanti Connect Secure Authentication Bypass (CVE-2026-104935) Ivanti confirms active exploitation of a high-severity (CVSS 8.6) authentication bypass vulnerability in Ivanti Connect Secure that allows unauthenticated attackers to execute arbitrary commands.… · censys@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/2369765