Talos research Talos 16d ago

The Q3 Vulnerability Pulse: Discovery ≠ Exploitation

Is the cybersecurity world really facing a "Bugmageddon?" Thor breaks down the latest CVE and KEV trends in the latest Threat Source newsletter.

Read at Cisco Talos Intelligence

EPSS: 0.87 (p100)

Why it ranks 31 (Notable)

EPSS 0.87 (high probability of exploitation)
Covered by 9 independent sources
Threat research
Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.

Related coverage

Other items that share a CVE or were clustered with this one.

22

Research Check Point Research 12d ago

19th October – Threat Intelligence Report

EPSS 0.27 CVE-2026-35029 CVE-2026-59823 CVE-2026-96951+4 more
37

CCCS advisory CCCS 15d ago

Ivanti security advisory (AV26-1035)

EPSS 0.87 CVE-2026-104935 CVE-2026-111357 CVE-2026-118527+1 more Ivanti
59

News Dark Reading 17d ago

Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles

Exploited EPSS 0.87 Fix available CVE-2026-104935 Ivanti
55

Ivanti advisory Ivanti 18d ago

October 2026 Patch Tuesday

Exploited CVSS 8.7 No fix yet CVE-2026-88779 CVE-2026-104286 CVE-2026-102255+11 more Ivanti
89

Research Rapid7 18d ago

Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Exploited CVSS 8.6 EPSS 0.87 Fix available CVE-2026-104935 CVE-2025-0282 Ivanti
65

Ivanti advisory Ivanti 18d ago

October 2026 Security Update

Exploited EPSS 0.87 Fix available CVE-2026-104935 Ivanti
80

CISA alert CISA 18d ago

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Exploited EPSS 0.87 CVE-2026-96951 CVE-2026-104935 Microsoft Ivanti
85

CISA alert CISA 18d ago

CISA Urges Patching Newly Exploited Vulnerabilities in Ivanti Connect Secure

Exploited EPSS 0.87 Fix available CVE-2026-111357 CVE-2026-118527 CVE-2026-104935 Ivanti
85

CISA alert CISA 18d ago

CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure

Exploited EPSS 0.87 Fix available CVE-2026-104935 Ivanti
90

KEV CISA KEV 19d ago

Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

KEV · due 16 Oct 2026 (overdue) EPSS 0.87 Fix available CVE-2026-104935 Ivanti

The Q3 Vulnerability Pulse: Discovery ≠ Exploitation

Links

Related coverage

19th October – Threat Intelligence Report

Ivanti security advisory (AV26-1035)

Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles

October 2026 Patch Tuesday

Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

October 2026 Security Update

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Urges Patching Newly Exploited Vulnerabilities in Ivanti Connect Secure

CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure

Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

Keyboard