- Ivanti has released a security update to address a vulnerability in Ivanti Connect Secure (ICS).
- The vulnerability, identified as CVE-2026-104935, is an authentication bypass vulnerability that is exploited through spoofing (impersonation).
- Affected Versions include Ivanti Connect Secure (ICS) 22.8R2.4 And earlier, 25.1.1.1 And earlier, and 25.1.2.2 And earlier.
- The latest versions containing the patch are Ivanti Connect Secure (ICS) 22.8R2.5, 25.1.1.2, 25.1.3.0, And 25.1.3.1.
- Ivanti has advised users to update to the latest version with the Vulnerability Patch, following the instructions on the reference site.
