vulnerability
Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN
HighCVSS 8.6Exploited
Summary
Ivanti has warned customers about a zero-day vulnerability (CVE-2026-104935) in its Connect Secure (ICS) VPN appliances that has been exploited in the wild by the threat actor UTA0576. Ivanti has released patches to address the vulnerability.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data