CVE-2026-104935 added to CISA KEV: Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

<div class="SCXW209185679 BCX8"> <div class="OutlineElement Ltr SCXW209185679 BCX8"> <p>CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, <a href="https://www.cve.org/CVERecord?id=CVE-2026-104935" target="_blank"><u>CVE-2026-104935</u></a>, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA is aware of cyber threat actors exploiting this zero-day authentication bypass vulnerability, which allows remote, unauthenticated execution of arbitrary commands, to conduct credential theft and data exfiltration. CISA added…