# Ivanti urges patching for exploited Connect Secure authentication bypass

_Published Tuesday, October 13, 2026 at 12:03 PM EDT · Security · Latest · Tier 1 — Major_

![Ivanti urges patching for exploited Connect Secure authentication bypass — Primary](https://www.bleepstatic.com/content/hl-images/2026/10/13/Ivanti.jpg)

Ivanti urged customers to patch an actively exploited authentication bypass in its Connect Secure remote access gateway. The vulnerability, CVE-2026-104935, lets remote attackers without privileges execute arbitrary commands in low-complexity attacks requiring no user interaction.

Reported by Volexity, the flaw affects versions 22.8R2.4 and earlier, 25.1.2.2 and earlier, and 25.1.1.1 and earlier. Ivanti said it knows of limited exploitation and advised customers to upgrade to a fixed version and regularly run its Integrity Checker Tool.

Shadowserver tracks over 5,500 Connect Secure instances exposed online. That count does not establish how many are honeypots or already protected against the attacks.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/ivanti-warns-of-connect-secure-zero-day-exploited-in-attacks/)

---
Canonical: https://techandbusiness.org/newswire/jO6GvsXCnQS_9i7cJyWVVH
Published: 2026-10-13T16:03:08.153Z
Story chronology: 2026-10-13T15:45:50.000Z
Retrieved: 2026-10-13T19:04:23.469Z
Publisher: Tech & Business (techandbusiness.org)