CVE Details

CVE-2026-104935 Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
Published: 2026-10-13 CVSS: 8.6 HIGH Product: Ivanti Connect Secure Due Date: 2026-10-16

Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.

GitHub PoC

Warning: GitHub PoC repositories are unverified. Some may be fake or contain malware. Use caution and review code before running anything.

No GitHub PoC data.

FIRST EPSS

EPSS estimates the probability of exploitation in the next 30 days. Higher values indicate higher likelihood of real-world exploitation.

No EPSS data.

Timeline

CVE Stalker KEV MITRE GitHub FIRST (EPSS)

MITRE

CVSS

  • Score: 8.6
  • Severity: HIGH
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

SSVC

  • Exploitation: active
  • Automatable: yes
  • Technical Impact: total

References

Show Raw Data
Key Remaining Key Value
dataType CVE_RECORD
dataVersion 5.2
cveMetadata > cveId CVE-2026-104935
cveMetadata > assignerOrgId 3c1d8aa1-5a33-4ea4-8992-aadd6440af75
cveMetadata > state PUBLISHED
cveMetadata > assignerShortName ivanti
cveMetadata > dateReserved 2026-10-02T17:07:30.656Z
cveMetadata > datePublished 2026-10-13T15:31:07.757Z
cveMetadata > dateUpdated 2026-10-13T15:49:48.146Z
containers > cna > providerMetadata > orgId 3c1d8aa1-5a33-4ea4-8992-aadd6440af75
containers > cna > providerMetadata > shortName ivanti
containers > cna > providerMetadata > dateUpdated 2026-10-13T15:31:07.757Z
containers > cna > problemTypes > 0 > descriptions > 0 > lang en
containers > cna > problemTypes > 0 > descriptions > 0 > cweId CWE-290
containers > cna > problemTypes > 0 > descriptions > 0 > description CWE-290 Authentication bypass by spoofing
containers > cna > problemTypes > 0 > descriptions > 0 > type CWE
containers > cna > impacts > 0 > capecId CAPEC-115
containers > cna > impacts > 0 > descriptions > 0 > lang en
containers > cna > impacts > 0 > descriptions > 0 > value CAPEC-115 Authentication Bypass
containers > cna > affected > 0 > vendor Ivanti
containers > cna > affected > 0 > product Connect Secure
containers > cna > affected > 0 > versions > 0 > status unaffected
containers > cna > affected > 0 > versions > 0 > version 25.1.3.0
containers > cna > affected > 0 > versions > 0 > versionType custom
containers > cna > affected > 0 > versions > 1 > status unaffected
containers > cna > affected > 0 > versions > 1 > version 25.1.3.1
containers > cna > affected > 0 > versions > 1 > versionType custom
containers > cna > affected > 0 > versions > 2 > status unaffected
containers > cna > affected > 0 > versions > 2 > version 22.8R2.5
containers > cna > affected > 0 > versions > 2 > versionType custom
containers > cna > affected > 0 > versions > 3 > status unaffected
containers > cna > affected > 0 > versions > 3 > version 22.7R2.14
containers > cna > affected > 0 > versions > 3 > versionType custom
containers > cna > affected > 0 > defaultStatus affected
containers > cna > descriptions > 0 > lang en
containers > cna > descriptions > 0 > value Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.
containers > cna > descriptions > 0 > supportingMedia > 0 > type text/html
containers > cna > descriptions > 0 > supportingMedia > 0 > base64 False
containers > cna > descriptions > 0 > supportingMedia > 0 > value Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.  
containers > cna > references > 0 > url https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935
containers > cna > metrics > 0 > format CVSS
containers > cna > metrics > 0 > scenarios > 0 > lang en
containers > cna > metrics > 0 > scenarios > 0 > value GENERAL
containers > cna > metrics > 0 > cvssV3_1 > version 3.1
containers > cna > metrics > 0 > cvssV3_1 > attackVector NETWORK
containers > cna > metrics > 0 > cvssV3_1 > attackComplexity LOW
containers > cna > metrics > 0 > cvssV3_1 > privilegesRequired NONE
containers > cna > metrics > 0 > cvssV3_1 > userInteraction NONE
containers > cna > metrics > 0 > cvssV3_1 > scope UNCHANGED
containers > cna > metrics > 0 > cvssV3_1 > confidentialityImpact HIGH
containers > cna > metrics > 0 > cvssV3_1 > integrityImpact LOW
containers > cna > metrics > 0 > cvssV3_1 > availabilityImpact LOW
containers > cna > metrics > 0 > cvssV3_1 > baseSeverity HIGH
containers > cna > metrics > 0 > cvssV3_1 > baseScore 8.6
containers > cna > metrics > 0 > cvssV3_1 > vectorString CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
containers > cna > source > discovery UNKNOWN
containers > cna > x_generator > engine Vulnogram 1.0.5
containers > adp > 0 > metrics > 0 > other > type ssvc
containers > adp > 0 > metrics > 0 > other > content > id CVE-2026-104935
containers > adp > 0 > metrics > 0 > other > content > role CISA Coordinator
containers > adp > 0 > metrics > 0 > other > content > options > 0 > Exploitation active
containers > adp > 0 > metrics > 0 > other > content > options > 1 > Automatable yes
containers > adp > 0 > metrics > 0 > other > content > options > 2 > Technical Impact total
containers > adp > 0 > metrics > 0 > other > content > version 2.0.3
containers > adp > 0 > metrics > 0 > other > content > timestamp 2026-10-13T15:42:16.582526Z
containers > adp > 0 > references > 0 > url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-104935
containers > adp > 0 > references > 0 > tags > 0 government-resource
containers > adp > 0 > title CISA ADP Vulnrichment
containers > adp > 0 > providerMetadata > orgId 134c704f-9b21-4f2e-91b3-4a467353bcc0
containers > adp > 0 > providerMetadata > shortName CISA-ADP
containers > adp > 0 > providerMetadata > dateUpdated 2026-10-13T15:49:48.146Z