CISA Advises Urgent Updates for Ivanti Connect Secure Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent advisory, urging organizations to update their Ivanti Connect Secure (ICS) appliances immediately. This follows the active exploitation of an authentication bypass vulnerability (CVE-2026-104935) that enables unauthenticated remote code execution, leading to credential theft and data exfiltration. Federal agencies must apply fixes by October 16, 2026.