CVE-2026-104935

No fix known ExploitedEPSS 87%CVSS 8.6

Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.

Published 2026-10-13 · In CISA KEV since 2026-10-13 · CVE record · OSV

Products: ivanti connect_secure