October 2026 Security Update
Security is foundational to how Ivanti builds, tests, and supports our products. We continue to strengthen our secure product development practices through vulnerability discovery, responsible disclosure processes, security testing, threat-informed hardening, and coordinated response programs. Additionally, we recognize the importance of clear, timely communication when security issues arise. To that end, today we are disclosing a vulnerability in limited versions of Ivanti Connect Secure. At the time of disclosure, Ivanti is aware of limited exploitation in the wild. We are working directly with those organizations while making information, updates and remediation available to the broader c
Read at Ivanti security advisories (blog)
- Vendor
- Ivanti
- EPSS
- 0.87 (p100)
- Exploitation
- observed in the wild
- Fix
- available
Why it ranks 65 (High)
- Exploitation observed in the wild
- EPSS 0.87 (high probability of exploitation)
- Covered by 9 independent sources
- Fix available
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Ivanti security advisories (blog) (ivanti.com)
- CVE-2026-104935 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.