Ivanti warns of Connect Secure zero-day exploited in attacks
Ivanti urges immediate patch for CVE-2026-104935, a high-severity zero-day vulnerability in Connect Secure.
Intelligence analysis by Qwen 2.5 (3B)
Ivanti warns of a zero-day vulnerability in Connect Secure, a remote access gateway, affecting multiple versions. The vulnerability can be exploited without user interaction.
Ivanti found a bug in their Connect Secure software that lets bad guys do bad things without permission. They told people to fix it right away.
Analysis
{"#CVE-2026-104935":["The vulnerability, CVE-2026-104935, affects Connect Secure versions 22.8R2.4 and earlier, 25.1.2.2 and earlier, and 25.1.1.1 and earlier.","Ivanti recommends immediate patching for customers running affected versions.","Volexity and Defused confirmed the vulnerability and its exploitation by a threat actor."],"#Connect Secure":["Connect Secure is an enterprise-grade SSL VPN for remote access.","Ivanti is working with affected organizations and providing information and updates."],"#Ivanti":["Ivanti has patched multiple vulnerabilities in Connect Secure over the past few years.","Ivanti has over 3,000 employees and serves 40,000 customers worldwide."]}
Key points
- Ivanti warns of a zero-day vulnerability in Connect Secure
- The vulnerability affects multiple versions of the software
- Customers should patch immediately to prevent exploitation
- Ivanti is working with affected organizations to address the issue
Customers who act quickly can prevent the vulnerability from being exploited.
If customers delay, the vulnerability could be exploited, allowing attackers to control the software and steal data.
