CVE-2026-104935
Sfruttamento noto · CISA KEV
CVSS 8.6 HIGH: authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands.
Data di correzione federale CISA 16 ott
Vulnerabilità · 1 ore fa
Ivanti Connect Secure è finito sotto sfruttamento attivo e CISA ha aggiunto CVE-2026-104935 al catalogo KEV il 13 ottobre. Volexity attribuisce l’attività a UTA0576 e Ivanti ha pubblicato patch per il blocco di authentication bypass e RCE, ma la correzione per il privilege escalation resta in arrivo.
Il punto critico è che l’attaccante non deve conoscere una password: può far credere al gateway che la richiesta provenga già da una sessione valida, poi usare la catena di falle per eseguire comandi fino a root. Volexity ha osservato anche compromissione soprattutto in memoria e cancellazione dei log, quindi i controlli di integrità ordinari possono non vedere l’intrusione.
Per chi usa il VPN gateway come porta d’ingresso alla rete interna, il significato è semplice: il patching chiude la falla, ma non basta da solo a escludere che il dispositivo abbia già fatto da punto d’appoggio e da filtro fidato verso Active Directory.
Sfruttamento noto · CISA KEV
CVSS 8.6 HIGH: authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands.
Data di correzione federale CISA 16 ott
17 fonti che coprono questa storia
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
Cisco Secure Email Gateway Arbitrary File Write Vulnerability.
Hackers abuse the Ivanti Connect Secure bug to gain access without accounts
The critical authentication bypass allowed remote attackers to bypass login checks and execute commands on vulnerable appliances before patches were fully backported.
A threat actor has been using an exploit chain combining three vulnerabilities in Ivanti's ICS appliances to breach organizations.
Múltiples vulnerabilidades en productos de Fortinet
Gwendal Guégniaud y Adham El Karn, de Fortinet Product Security, junto con Jason McFadyen, de TrendAI
Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products
Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks.
Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day
The security vendor said it initially discovered a portion of the defect during internal security checks in June, but the company said it didn’t meet the threshold for an out-of-band release.
Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN
CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution with elevated privileges.
CVE-2026-106175: Fortinet FortiOS
CVE-2026-106175: Fortinet FortiOS A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitc
CVE-2026-23707: Fortinet FortiManager
CVE-2026-23707: Fortinet FortiManager An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, Fo
CVE-2026-23706: Fortinet FortiAnalyzer
CVE-2026-23706: Fortinet FortiAnalyzer An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, F
CVE-2026-23705: Fortinet FortiAnalyzer
CVE-2026-23705: Fortinet FortiAnalyzer An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, F
CVE-2025-46773: Fortinet FortiAnalyzer
CVE-2025-46773: Fortinet FortiAnalyzer An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, F
Part of the PlainSec briefing for 2026-10-14