CERT24Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root AccessLoading data…
CERT24Threat Observatory
Period

Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

CISA added two Ivanti Connect Secure vulnerabilities to its Known Exploited Vulnerabilities catalog following active exploitation. They were used together with the authentication-bypass vulnerability CVE-2026-104935 to achieve unauthenticated root-level code execution.

← Back to intelligence

Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

CISA added two Ivanti Connect Secure vulnerabilities to its Known Exploited Vulnerabilities catalog following active exploitation. They were used together with the authentication-bypass vulnerability CVE-2026-104935 to achieve unauthenticated root-level code execution.