CISA adds exploited Ivanti Connect Secure zero-day CVE-2026-104935 (unauthenticated RCE) and Windows CVE-2026-96951 to KEV
CISA warns that threat actors are exploiting CVE-2026-104935, a zero-day authentication bypass by spoofing in Ivanti Connect Secure that allows remote, unauthenticated execution of arbitrary commands. The activity is being used for credential theft and data exfiltration. On Oct. 13, 2026, CISA added it to its Known Exploited Vulnerabiliti…