CVE-2026-104935

Ivanti Connect Secure allows remote unauthenticated attackers to bypass authentication and execute arbitrary commands via a spoofing vulnerability.

This authentication bypass by spoofing vulnerability enables remote attackers to execute arbitrary commands without needing valid credentials, directly enabling remote code execution (RCE). For DIB organizations, this means unpatched Connect Secure deployments are highly vulnerable to initial access and lateral movement, requiring immediate patching and strict change management to avoid compliance failures under NIST 800-171 and CMMC requirements.

Shame score — A remote unauthenticated authentication bypass enabling arbitrary command execution is a severe, avoidable failure that directly enables RCE and is actively exploited in the wild.