Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)
From the source: Rapid7 Blog
Overview On October 13, 2026, Ivanti published a security advisory for CVE-2026-104935 , a high-severity authentication bypass by spoofing ( CWE-290 ) affecting Ivanti Connect Secure (ICS). The vulnerability has a CVSSv3.0 score of 8.6 and allows a remote, unauthenticated attacker to execute arbitrary commands. Ivanti reports that exploitation in the wild has already occurred prior to disclosure,…
Read the full story on Rapid7 BlogAsk the square
The story is what was announced. If it raises a question for your team, ask the people who run this technology day to day. Your post links back to this story, so the next reader finds it too.
Recent threads in Security
Which security investments are you prioritising for FY27?
Identity, cloud security posture, AI security, SOC automation, resilience? Share your top two and why.
How are you securing employee use of generative AI tools?
Blocking, allow-listing, DLP, enterprise licences, policy and training: what combination is working in practice?
Something wrong or out of date? Suggest a correction. We reply within 5 business days.
More from Rapid7
Recent updates from Rapid7, so you can tell whether this is a one-off or part of a pattern.
More in Security
What other companies in Security are doing. The category page shows who’s active, side by side.
