CVE-2026-104935
Ivanti Connect Secure
Patch now: it is being exploited
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.