Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN
Teaser from the source
CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution with elevated privileges. The post Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekLinked advisories
- CVE-2026-104935Ivanti Connect Secure — Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
- CVE-2026-104935Eine Schwachstelle zur Umgehung der Authentifizierung durch Spoofing in ICS vor Version 25.
- CVE-2026-104935October 2026 Security Update
- CVE-2026-104935Ivanti Connect Secure: Schwachstelle ermöglicht die Umgehung von Authentifizierung und Codeausführung
More on Zero-Day
Other advisories
- Not ratedcerteu:2025-029Security Advisory 2025-029 — Possible Zero-Day Vulnerability in SonicWall Products
- CriticalCVE-2025-54309Security Advisory 2025-028 — CrushFTP zero-day exploited in the wild
- Not ratedosv:GHSA-7vpr-3ppw-qrpjImageflow affected by libwebp zero-day and should not be used with malicious source images.
Other news entries
- ⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and MoreNewsThe Hacker News
- BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge BugsNewsDark Reading
- Chinese APT Exploited BeyondTrust Vulnerability as Zero-DayNewsSecurityWeek
- BeyondTrust zero-day tied to Chinese spies puts Remote Support users on alertNewsCSO Online
- China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support ServersNewsThe Hacker News
- BeyondTrust patches zero-day exploited in attacks since AugustNewsBleepingComputer
- Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code ExecutionNewsSecurityWeek
- Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacksNewsBleepingComputer
Source: https://www.securityweek.com/ivanti-zero-day-chain-gave-attackers-root-access-to-fully-patched-vpn/
ID