onyx --cves cve-2026-104935
CVE-2026-104935
- score
- 55.8
- cvss
- —
- epss
- 26.0%
- published
- —
- kev added
- 2026-10-13
- first seen
Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Added to CISA KEV
- First advisory — CISA CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure
- Tracked by Onyx
- Nuclei template Ivanti Connect Secure <= 22.8R2.4 - Authentication Bypass via X-DSCGI-PATH Header
Nuclei template
A verified check exists — you can scan for this today, and so can everyone else.
- template
- Ivanti Connect Secure <= 22.8R2.4 - Authentication Bypass via X-DSCGI-PATH Header
- severity
- CRIT
- first seen
nuclei -id CVE-2026-104935 -u https://target.exampleAdvisories
0 feeds this week
- ADV Vulnérabilité dans Ivanti Connect Secure (ICS) (14 octobre 2026)
- ADV Multiples vulnérabilités dans les produits Ivanti (14 octobre 2026)
- ADV October 2026 Security Update
- ADV CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure
- ADV CISA Adds Two Known Exploited Vulnerabilities to Catalog