ivanti News Articles

Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935) - IT Security News

Overview On October 13, 2026, Ivanti published a security advisory for CVE-2026-104935, a high-severity authentication bypass by spoofing (CWE-290) affecting Ivanti Connect Secure (ICS). The vulnerability has...

2 weeks ago

Ivanti VPN Zero-Day Attacks Target Credentials: What to Patch

Ivanti Connect Secure zero-day attacks target credentials. Learn which VPN versions to patch and how to investigate possible network compromise.

2 weeks ago

Ivanti Zero-Day Attacks Highlight Vendor Patching Hurdles

CVE-2026-104935, an authentication bypass + RCE vulnerability, was only partially patched in July, leaving an opening for threat actors to capitalize on.

2 weeks ago

Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks

Vendor promises fix for separate privilege-escalation flaw in the coming weeks

2 weeks ago

Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks

Vendor promises fix for separate privilege-escalation flaw in the coming weeks

2 weeks ago

(TLP:CLEAR) Vulnerability Notification – CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure CVE-2026-104935 Used in Unauthenticated Root-Level RCE Chain - WaterISAC

ACTION MAY BE REQUIRED for utilities using affected Ivanti Connect Secure appliances. Utilities that outsource technology support should consult their service providers for assistance with remediation...

2 weeks ago

CISA warns admins to immediately fix Ivanti flaw exploited as zero-day

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day attacks since at least October 1st.

2 weeks ago

CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts

CISA says attackers are exploiting an Ivanti Connect Secure authentication bypass to execute commands, steal credentials, and exfiltrate data.

2 weeks ago

Ivanti Connect Secure Zero Day Exploited in Attacks

A high-severity authentication bypass vulnerability has been identified in the Ivanti Connect Secure (Pulse Connect Secure) enterprise-grade SSL VPN that A zero-day authentication vulnerability has been identified in Ivanti Connect Secure remote access gateway that is being actively exploited. The v...

2 weeks ago

Ivanti Connect Secure CVE-2026-104935 Flaw Enables Unauthenticated Remote Code Execution - IT Security News

2026-10-14 11:10 Ivanti released security updates for Ivanti Connect Secure (ICS) to address CVE-2026-104935, a high-severity authentication-bypass vulnerability. This vulnerability allows...

2 weeks ago

Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances - Help Net Security

A threat actor has been using an exploit chain combining three vulnerabilities in Ivanti's ICS appliances to breach organizations.

2 weeks ago

Attackers chain three Ivanti VPN zero-days for root access

Key points An unknown threat actor, tracked as UTA0576, chained three zero-day vulnerabilities to take root control of a fully patched Ivanti Connect Secure VPN appliance, Volexity said. Ivanti has patched...

2 weeks ago

Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far - SwapUpdate

Swati KhandelwalOct 13, 2026Vulnerability / Enterprise Security

2 weeks ago

Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day

The security vendor said it initially discovered a portion of the defect during internal security checks in June, but the company said it didn’t meet the threshold for an out-of-band release.

2 weeks ago

Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far

An attacker exploited three Ivanti Connect Secure zero-days to run commands as root and steal stored credentials from one appliance.

2 weeks ago

Ivanti warns of Connect Secure zero-day exploited in attacks

Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway.

2 weeks ago

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN

Ivanti has patched CVE-2026-104935, a Connect Secure (ICS) zero-day exploit that allows unauthenticated remote code execution.

2 weeks ago

Ivanti Sentry Flaw Triggers CISA's First 3-Day Federal Patch Mandate, Already Exploited

Ivanti Sentry vulnerability patch is mandatory for federal agencies by June 14 under CISA’s BOD 26-04, which replaces flat CVSS deadlines with a four-variable risk model. Attackers backdoored Sentry

CISA orders feds to patch actively exploited Ivanti flaw by Sunday

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered government agencies to patch an actively exploited Ivanti Sentry flaw within three days, as mandated by the newly issued Binding Operational Directive (BOD) 26-04.

Ivanti Sentry Exploitation Attempts Hitting Honeypots

CVE-2026-10520, a critical-severity vulnerability in Ivanti Sentry, was flagged as exploited based on activity observed on honeypots.

Max-Severity Ivanti Sentry Flaw Exploited Within 24 Hours

Initial methods suggest attackers had likely mapped out Ivanti's asset landscape upfront and acted quickly once the exploit became public.

Ivanti Sentry Actively Exploited: CVSS 10.0 Flaw Backdoors Enterprise Mobile Gateways

Ivanti Sentry vulnerability CVE-2026-10520 is now actively exploited: Shadowserver confirmed backdoored enterprise mobile gateways within 24 hours of a public proof-of-concept exploit release.

Ivanti Command Injection Vulnerability Exploited in Attacks Following PoC Release - IT Security News

Threat actors have begun actively exploiting a critical Ivanti Sentry command injection vulnerability just days after a proof-of-concept (PoC) exploit was made public, according to new internet scanning data from the Shadowserver Foundation. The flaw, tracked as CVE-2026-10520, carries a…Read more →

Ivanti Command Injection Vulnerability Exploited in Attacks Following PoC Release

Attackers are actively exploiting a critical Ivanti Sentry command injection flaw days after a public PoC exploit was released.

Critical Ivanti Sentry flaw allows root-level remote code execution (CVE-2026-10520) - Help Net Security

Ivanti has patched two critical Ivanti Sentry vulnerabilities (CVE-2026-10520, CVE-2026-10523) and urged customers to upgrade quickly.