Cyber Attacks
1 Ivanti Priv Escalation Flaw Unpatched After 3-Flaw Root Chain
Attackers chained three flaws in Ivanti Connect Secure to gain root access. Patches exist for the initial bypass, but one privilege escalation issue remains.
CVE-2026-104935
Everything Patch Herald has reported about CVE-2026-104935: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
1 Unpatched Ivanti Flaw Remains After CISA KEV Addition; Zero-Chain Grants Root
CISA added an exploited authentication bypass in Ivanti Connect Secure to its catalog. Updates exist for most versions, but one flaw remains unpatched.