High-severity CVE-2026-104935 affects Ivanti Connect Secure

## Overview CVE-2026-104935 is a high-severity vulnerability affecting Ivanti Connect Secure (ICS) versions prior to 25.1.3.0. This flaw allows remote unauthenticated attackers to bypass authentication through spoofing techniques. The vulnerability does not impact ICS version 22.7R2.14 or earlier. ## Technical Details The vulnerability arises from improper handling of authentication requests. An attacker can exploit this flaw to impersonate legitimate users and gain unauthorized access to the system. This could lead to the execution of arbitrary commands on the affected device. The CVSS score for this vulnerability is 8.6, indicating a high level of risk. ## Impact Successful exploitation of CVE-2026-104935 can result in severe consequences for affected organizations. Attackers could potentially manipulate system configurations, access sensitive data, or disrupt services. Given the nature of the vulnerability, it poses a significant threat to the integrity and confidentiality of the systems using affected versions of ICS. ## Mitigation Defenders should immediately upgrade their Ivanti Connect Secure installations to version 25.1.3.0 or later. This update addresses the authentication bypass vulnerability. Organizations should also review their security policies and monitor for any unusual activity that may indicate exploitation attempts. Regularly updating software and conducting security audits can help mitigate risks associated with such vulnerabilities.