{
  "id": 14509601,
  "title": "CVE-2026-104935: Ivanti Connect Secure Authentication Bypass Vulnerability — Analysis & Mitigation",
  "url": "https://urgent.news/2026/10/14/cve-2026-104935-ivanti-connect-secure-authentication-bypass",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-14T18:31:02.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/iamfaizanakhtar/cve-2026-104935-ivanti-connect-secure-authentication-bypass-vulnerability-analysis-mitigation-1cfm"
  },
  "original_language": "en",
  "account": "On October 13, 2026, Ivanti disclosed a high-severity authentication bypass vulnerability in Ivanti Connect Secure (CVE-2026-104935). The flaw allows a remote attacker to bypass authentication and execute arbitrary commands on the appliance without credentials or user interaction. CISA added the vulnerability to its Known Exploited Vulnerabilities catalog with a three-day federal patch deadline of October 16, 2026. The disclosure shows the dangers of identity access management failures at the network edge, as a single spoofable authentication signal can lead to initial access for an entire organization. Ivanti confirmed that versions before 25.1.3.0 are affected, including all 25.1.x releases and 22.8R2.4 and earlier. There is no workaround other than upgrading to the fixed versions. The authentication bypass vulnerability is classified as CWE-290 (Authentication Bypass by Spoofing) and has a CVSS score of 8.6 (High).",
  "summary": "Summary On October 13, 2026, Ivanti disclosed CVE-2026-104935 , a high-severity authentication bypass vulnerability in Ivanti Connect Secure (ICS) — the company's enterprise SSL-VPN edge gateway — that lets a remote attacker with no credentials and no user interaction bypass authentication and execute arbitrary commands on the appliance. CISA added the flaw to its Known Exploited Vulnerabilities…",
  "key_points": [
    "Ivanti disclosed authentication bypass vulnerability CVE-2026-104935 on October 13, 2026",
    "Remote attacker can bypass authentication and execute commands without credentials",
    "Versions before 25.1.3.0 affected, including 25.1.x and 22.8R2.4 and earlier"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "Dev.to",
        "title": "CVE-2026-96951: Microsoft Windows Shell Mark-of-the-Web Bypass Vulnerability — Analysis & Mitigation",
        "url": "https://urgent.news/2026/10/14/cve-2026-96951-microsoft-windows-shell-mark-of-the-web-bypass",
        "published": "2026-10-14T18:32:06.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}