Ivanti patches exploited Connect Secure zero-day CVE-2026-104935 and six flaws in Neurons Patch for Intune and Xtraction
Ivanti released security updates for an actively exploited Connect Secure zero-day, CVE-2026-104935, and six other vulnerabilities in Neurons Patch for Intune and Xtraction. CVE-2026-104935 is a spoofing-based authentication bypass that lets remote, unauthenticated attackers execute arbitrary commands, and Ivanti confirmed limited exploit…