WATCHExploited vulnerability
Ivanti Connect Secure
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
What's happening and what to do
A remote attacker with no login can bypass authentication by spoofing and run arbitrary commands on the device, and this flaw is being actively exploited. Ivanti Connect Secure. Apply the vendor's mitigations or update now, and check for signs of compromise.
AI summary of the sources on this page. Regenerated when a source changes.
Signals over time
- 2026-10-13Added to CISA's Known Exploited Vulnerabilities catalog.
- 2026-10-16Federal patch deadline for US agencies.
- 2026-11-03 21:55First seen here.
Source text
Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.