CVE-2026-104935: what an authentication bypass on the appliance that checks identity means for the credentials behind it

A spoofed routing header let an unauthenticated attacker run commands on an Ivanti Connect Secure appliance.

October 15, 2026 · 6 min · Caleb