/
vendors:Ivanti × latest_source_host:cisa.gov × limpar

Resultados

2 casos · pág. 1/1

cisa.gov · high

CISA adds Microsoft Windows CVE-2026-96951 and Ivanti Connect Secure CVE-2026-104935 to KEV catalog over active exploitation

CISA added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2026-96951, a command injection flaw in Microsoft Windows, and CVE-2026-104935, an authentication bypass by spoofing in Ivanti Connect Secure. CISA describes these vulnerability types as a frequent attack vecto…

CVE-2026-96951 CVE-2026-104935 government
cisa.gov · critical

Ivanti Connect Secure zero-day CVE-2026-104935 exploited for unauthenticated RCE, credential theft and data exfiltration; added to CISA KEV

CISA warns that threat actors are exploiting CVE-2026-104935, a zero-day authentication bypass in Ivanti Connect Secure that allows remote, unauthenticated execution of arbitrary commands. The activity is being used for credential theft and data exfiltration. CISA added the CVE to its Known Exploited Vulnerabilities (KEV) Catalog on Oct. …

CVE-2026-104935