← CVE Intelligence

CVE-2026-104935

Ivanti / Connect Secure PUBLISHED

Description (CNA)

Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.

Affected (CNA)

Vendor / productVersions
Ivanti / Connect Secureunaffected 25.1.3.0; unaffected 25.1.3.1; unaffected 22.8R2.5; unaffected 22.7R2.14

CWE

CWE-290

References

ADP enrichment

CISA-ADP

No English description supplied.