{"id":"CVE-2026-104935","url":"https://compromised.live/t/CVE-2026-104935","kind":"exploited_vuln","tier":2,"severity":"high","title":"Ivanti Connect Secure: Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability","summary":"A remote attacker with no login can bypass authentication by spoofing and run arbitrary commands on the device, and this flaw is being actively exploited. Ivanti Connect Secure. Apply the vendor's mitigations or update now, and check for signs of compromise.","summary_source":"ai","affected":[],"epss":null,"kev":{"date_added":"2026-10-13","due_date":"2026-10-16","ransomware":false},"first_seen":"2026-11-03T21:55:44.095Z","updated_at":"2026-11-03T21:55:44.095Z","status":"active","details":"Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.","aliases":["CVE-2026-104935"],"sources":[{"name":"kev","id":"CVE-2026-104935","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104935"}]}