An active zero-day vulnerability, tracked as CVE-2026-104935 with a CVSS score of 8.6, has been found in Ivanti Connect Secure. Attackers can exploit this flaw remotely without authentication. The Dutch NCSC warns that limited exploitation has already been observed in the wild. Administrators are strongly advised to apply the provided security updates immediately to secure their network infrastructure against potential breaches.
READ THE ORIGINAL ARTICLE AT NCSC.NL →