{"id":"CVE-2026-104935","published":"2026-10-13T16:17:11.640","lastModified":"2026-10-13T19:24:36.243","description":"Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.","cvssScore":8.6,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","cwes":["CWE-290"],"vendors":["ivanti"],"products":["connect secure"],"references":[{"url":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-104935","tags":["US Government Resource"]}],"exploitRefs":[],"hasPoc":false,"ai":null}