🚨 We added Ivanti Connect Secure vulnerability CVE-2026-104935 to the KEV Catalog after observed exploitation. A remote attacker could bypass authentication to execute commands, steal credentials, and exfiltrate data. Update now and review our Alert. 🔗 go.dhs.gov/5Kc
- 🚨 We added Ivanti Connect Secure vulnerability CVE-2026-104935 to the KEV Catalog after observed exploitation. A remote attacker could bypass authentication to execute commands, steal credentials, and exfiltrate data. Update now and review our Alert. 🔗 go.dhs.gov/5Kc
the line i'd read twice: ivanti's integrity checker may miss this, since the commands run in memory. so a clean scan isn't a clean box. and patching doesn't take back stolen credentials. hence the recovery steps ending in a reset of every password and cert.
For anyone in PCI DSS scope: v4.0.1 6.3.3 expects critical or high-security patches installed within one month of release. A KEV listing for exploited authentication bypass is a strong reason to rank this one critical.
Edge VPN appliances keep showing up in KEV for a reason: auth bypass on an internet-facing gateway is often the first step to full network access. Worth checking logs for prior compromise, not just patching.
