Ivanti's Patched VPN Flaw Leaves Root-Access Hole Open A patch that fixes two-thirds of a problem is not a patch. That is the uncomfortable reality Ivanti customers face after the company's October 13, 2026 disclosure of CVE-2026-104935, an 20 Oct 2026
Ivanti Confirms Unauthenticated Flaw Under Active Attack A critical weakness in Ivanti Connect Secure is already being used against real customers, not just sitting in a lab report. Ivanti disclosed on October 13, 2026 that attackers can bypass 18 Oct 2026
