companyIvanti
suspectedlowVulnerabilityFirst reported Oct 13, 2026 · Disclosed Oct 13, 2026 · Updated Oct 14, 2026
Ivanti: actively exploited zero-day in Connect Secure allows unauthenticated command execution
Ivanti disclosed an actively exploited zero-day in Ivanti Connect Secure, tracked as CVE-2026-104935 with a CVSS score of 8.6, that lets remote attackers execute arbitrary commands without authentication. In its October 13, 2026 advisory, Ivanti confirmed exploitation affected a limited number of customers.
Members only
The full record: the timeline (2 updates) and 11 linked reports
- Every update as it happened, with the status at each step
- Every report behind the record, newest first
- Alerts the moment Ivanti — or anything else you track — is hit again
A free account is all it takes — no card, one minute.