CVE-2026-104935

Ivanti Connect Secure

Parchea ya: se está explotando

Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.

En las noticias

• Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles · Dark Reading
• CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts · The Hacker News
• Múltiples vulnerabilidades en productos de Ivanti · INCIBE-CERT
• Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN · SecurityWeek