CISA Mandates Immediate Ivanti Connect Secure Patch for Critical Authentication Bypass Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning for organizations to update Ivanti Connect Secure appliances to address a critical authentication bypass vulnerability (CVE-2026-104935) with a CVSS score of 8.6, which is actively being exploited in the wild.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure (ICS) appliances and deployments to the latest version following the disclosure of an actively exploited vulnerability.

The security flaw, tracked as CVE-2026-104935 (CVSS score: 8.6), is a case of authentication bypass impacting ICS

Read original article