Critical Ivanti VPN Zero-Day Vulnerability Under Active Cyberattack Threat

ISLAMABAD: A critical zero-day vulnerability in Ivanti Connect Secure VPN appliances is currently being exploited in active cyberattacks. The flaw, identified as CVE-2026-104935, allows remote attackers to bypass authentication and execute arbitrary commands on affected devices without requiring any credentials. This vulnerability has been assigned a CVSS severity score of 8.6 out of 10, indicating a high level of risk.

Security experts have raised alarms about the implications of this vulnerability, which stems from an authentication bypass through spoofing. Organizations using Ivanti Connect Secure VPN are urged to take immediate action to mitigate potential risks. The cybersecurity community is closely monitoring the situation, with many urging users to apply patches and updates as soon as they become available.

The exploitation of this vulnerability poses significant risks not only to individual organizations but also to broader cybersecurity infrastructure. If left unaddressed, it could lead to unauthorized access to sensitive data and systems, potentially impacting various sectors including finance, healthcare, and government.

In response to the ongoing threat, cybersecurity agencies are expected to issue further guidance and recommendations for organizations to bolster their defenses. Continuous monitoring and prompt updates will be crucial in mitigating the risks associated with this vulnerability.