Ivanti Connect Secure VPN zero-day vulnerabilities (CVE-2026-104935) actively exploited, patches released

CISA has added two new vulnerabilities, including CVE-2026-104935 affecting Ivanti Connect Secure, to its Known Exploited Vulnerabilities Catalog, citing evidence of active exploitation. Volexity reported a zero-day exploit chain that combines authentication bypass, remote code execution, and privilege escalation in Ivanti Connect Secure VPN appliances. Ivanti has since released patches to address the authentication bypass and RCE vulnerability.