CVE-2026-104935

Published Oct 13, 2026

Last updated 7 days ago

Exploit known CVSS high 8.6

Overview

Description: Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.
Source: 3c1d8aa1-5a33-4ea4-8992-aadd6440af75
NVD status: Analyzed
Products: connect_secure

Risk scores

CVSS 3.1

Type: Secondary
Base score: 8.6
Impact score: 4.7
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
Exploit added on: Oct 13, 2026
Exploit action due: Oct 16, 2026
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Weaknesses

3c1d8aa1-5a33-4ea4-8992-aadd6440af75: CWE-290

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "51F9201D-EF2F-4750-846E-912827761A9F",
            "versionEndExcluding": "25.1.1.2",
            "versionStartIncluding": "25.1.0.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "822E7CEB-9AB2-4B0E-B87A-B9718503466A",
            "versionEndExcluding": "25.1.3.0",
            "versionStartIncluding": "25.1.2.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2:*:*:*:*:*:*",
            "matchCriteriaId": "56FEC223-8FF7-4A05-9577-CFFE0AA6526C",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.1:*:*:*:*:*:*",
            "matchCriteriaId": "5569D323-6ADF-4B16-822D-FBA6760356C3",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.2:*:*:*:*:*:*",
            "matchCriteriaId": "FF4D400F-49DA-4C5F-8F63-5A15738360AE",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.3:*:*:*:*:*:*",
            "matchCriteriaId": "9CA7EF35-D0BC-4714-A38A-91660BE1BA55",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.4:*:*:*:*:*:*",
            "matchCriteriaId": "F22EC396-A447-4175-8A30-C8DC10ACFFE9",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.

Overview

Risk scores

CVSS 3.1

Known exploits

Weaknesses

Social media

Configurations

Related CVEs

References