Active Attacks Hit Ivanti Connect Secure Through Unpatched Zero-Day
In short: Attackers are already exploiting CVE-2026-104935, a flaw that lets them skip login entirely and run arbitrary commands on Ivanti Connect Secure appliances. The bug hits versions 25.1.1.1 and earlier, 25.1.2.2 and earlier, and 22.8R2.4 and earlier, and is being used for credential theft and data exfiltration. CISA added it to its Known Exploited Vulnerabilities list on October 13, 2026 and is pushing organizations to update without delay.
This summary was generated automatically by AI from CISA Advisories's publication. It is our own text, not a copy of the original — facts, figures and quotes belong to the source, linked above and below.
What changed?
- 1CVE-2026-104935 lets remote attackers bypass authentication and run commands with no credentials needed
- 2Impacted versions: 25.1.1.1 and prior, 25.1.2.2 and prior, 22.8R2.4 and prior
- 3Listed in CISA's KEV catalog as of Oct. 13, 2026
- 4Ivanti's Integrity Checker Tool can miss signs of compromise because the attack runs purely in memory
- 5Support for version 22.8 ends Jan. 31, 2027
- 6Suspected breaches require a full rebuild: factory reset, fresh backups, new passwords, reissued certificates and API keys
Why it matters
Connect Secure sits at the network edge for remote access, so a working zero-day there gives attackers a direct path into internal networks and the data behind them, with no login required.
What it means for AI agents and contact centers
If any part of your infrastructure, SIP trunks, or internal systems route through Ivanti Connect Secure for remote access, this is a priority patch: unauthenticated code execution on an edge appliance can expose call data, credentials, and internal services before anyone notices, since standard detection tools may not catch it.
Sources
- CISA AdvisoriesOfficialPrimary sourceOriginal article →„CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure“13 Oct 2026, 15:00Licence: US federal government work (17 U.S.C. §105) · our summary (content changed)
- Published by source
- 13 Oct 2026, 15:00
- Found by our system
- 14 Oct 2026, 01:11
- Summary generated
- 14 Oct 2026, 01:12
This article was written by AI from the original source. Facts, numbers and prices come from the source; missing values are marked “Not specified”. Legal notice, copyright and privacy