/
← Voltar ao feed
critical

Ivanti October 2026 updates fix multiple flaws; CVE-2026-104935 in Connect Secure actively exploited

1 fonte(s) · 1 atualização(ões) · publicado 13/10/2026 21:00 · coletado há 5 horas

CERT-FR advisory CERTFR-2026-AVI-1311 reports multiple vulnerabilities in Ivanti products, covering Connect Secure (ICS), Neurons for UEM and Xtraction. Some of them allow remote arbitrary code execution, privilege escalation, security policy bypass and loss of data confidentiality and integrity. Ivanti states that CVE-2026-104935 is being actively exploited. The fixes were published in the Ivanti October 2026 security update of 13 October 2026.

Technical Details

  • Affected: Connect Secure (ICS) 22.8Rx before 22.8R2.5, 25.1.1.x before 25.1.1.2 and 25.1.3.x before 25.1.3.1.
  • Affected: Xtraction versions before 2026.4.
  • Neurons for UEM was updated automatically on 16 September 2026.
  • The advisory lists these CVEs: CVE-2026-104935, CVE-2026-106034, CVE-2026-106035, CVE-2026-106042, CVE-2026-106043, CVE-2026-106047 and CVE-2026-109412.
  • Only CVE-2026-104935 is reported as exploited. It has a dedicated Ivanti Connect Secure advisory.
  • The article gives no IOCs, attribution or exploitation details.

Remediation

  • Apply the fixed versions listed in the Ivanti security bulletins: ICS 22.8R2.5, 25.1.1.2 or 25.1.3.1, and Xtraction 2026.4 or later.
  • Prioritise Connect Secure appliances because of the active exploitation.
  • Refer to the Ivanti advisories for CVE-2026-104935, Neurons Patch for Intune and Xtraction for full patch details.

Linha do tempo

  1. cert.ssi.gouv.fr ↗ · pub. 13/10/2026 21:00 · coletado 20/10 16:31 primeiro registro

    Ivanti October 2026 updates fix multiple flaws; CVE-2026-104935 in Connect Secure actively exploited

    ler a análise desta fonte

    CERT-FR advisory CERTFR-2026-AVI-1311 reports multiple vulnerabilities in Ivanti products, covering Connect Secure (ICS), Neurons for UEM and Xtraction. Some of them allow remote arbitrary code execution, privilege escalation, security policy bypass and loss of data confidentiality and integrity. Ivanti states that CVE-2026-104935 is being actively exploited. The fixes were published in the Ivanti October 2026 security update of 13 October 2026.

    Technical Details

    • Affected: Connect Secure (ICS) 22.8Rx before 22.8R2.5, 25.1.1.x before 25.1.1.2 and 25.1.3.x before 25.1.3.1.
    • Affected: Xtraction versions before 2026.4.
    • Neurons for UEM was updated automatically on 16 September 2026.
    • The advisory lists these CVEs: CVE-2026-104935, CVE-2026-106034, CVE-2026-106035, CVE-2026-106042, CVE-2026-106043, CVE-2026-106047 and CVE-2026-109412.
    • Only CVE-2026-104935 is reported as exploited. It has a dedicated Ivanti Connect Secure advisory.
    • The article gives no IOCs, attribution or exploitation details.

    Remediation

    • Apply the fixed versions listed in the Ivanti security bulletins: ICS 22.8R2.5, 25.1.1.2 or 25.1.3.1, and Xtraction 2026.4 or later.
    • Prioritise Connect Secure appliances because of the active exploitation.
    • Refer to the Ivanti advisories for CVE-2026-104935, Neurons Patch for Intune and Xtraction for full patch details.