PerimeterClock

Patch-to-exploitation timelines for edge appliances (Fortinet, SonicWall, Ivanti), with detection rules.

CVE-2026-104935: Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

Vendor: Ivanti
Product: Connect Secure
EPSS: 0.868 (99.7th percentile, 2026-10-30)

Summary

Ivanti Connect Secure has an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 2026-10-13.

Reviewed by PerimeterClock.

Timeline

Date Event Source
2026-10-13 Added to CISA KEV (confirmed exploitation) CISA KEV
2026-10-13 First public PoC repo seen GitHub

References

Affected and fixed versions: see the vendor advisory or NVD entry below.