Free practical cybersecurity guidance for organisations without a security team.
hello@actionsoncyber.com
Actions On Cyber logo
Contact
← Back to Vulnerability Briefs

Urgent Security Issue in Ivanti Connect Secure VPN

A serious security flaw has been found in Ivanti Connect Secure VPN software that could let hackers bypass login controls and run harmful commands remotely. This vulnerability is actively being exploited, meaning attackers are already using it to break into systems. Small businesses using this VPN should act quickly to protect themselves.

14 October 2026

Reference: CVE-2026-104935

1. What is being reported?

The report describes a weakness in Ivanti Connect Secure VPN software versions before 25.1.3.0. This flaw allows attackers who are not logged in to trick the system and gain control, potentially running any commands they want on the affected device.

2. What this means in plain English

If your organisation uses this VPN software and it is an affected version, attackers could break in without needing a password. This could lead to theft of sensitive information, disruption of services, or other serious damage.

3. Could this affect a small business?

Small businesses using Ivanti Connect Secure VPN versions before 25.1.3.0 may be at risk. Those using older versions like 22.7R2.14 or earlier are not affected. If you do not use this VPN product, this vulnerability does not apply to you.

4. What to do now

  • Check with your IT provider or software supplier if your Ivanti Connect Secure VPN version is affected.
  • If you have an affected version, apply the vendor’s security updates or mitigations immediately as per their instructions.
  • Review whether your VPN is exposed to the internet and limit access if possible.
  • If updates or mitigations are not available, consider discontinuing use of the product until it is secured.

5. Ask your IT provider

Can you confirm if our Ivanti Connect Secure VPN is affected by CVE-2026-104935 and what steps are being taken to protect us from this vulnerability?

6. Bottom line

If you use Ivanti Connect Secure VPN, act now to update or secure it to prevent attackers from gaining easy access.

Information based on CISA KEV, NVD, and multiple reputable security reports.

Back to Vulnerability Briefs