Browse rankings
All news & advisories
Actively exploited

CVE-2026-104935: Actively Exploited Vulnerability

CVE-2026-104935 CVSS 8.6 CISA KEV · actively exploited
Who it affects
See the summary below.
What to do
Patch immediately — prioritise internet-facing systems.

CVE-2026-104935 - Ivanti Neurons Authentication Bypass

Severity: HIGH (CVSS 8.6)
KEV Status: Exploited in the wild

Affected Product

  • Ivanti Neurons for ICS - versions before 25.1.3.0
  • Note: ICS version 22.7R2.14 and prior are NOT affected

Vulnerability

Authentication bypass via spoofing allows remote unauthenticated attackers to execute arbitrary commands.

Remediation

Upgrade Ivanti Neurons for ICS to version 25.1.3.0 or later.

References

Data as of October 14, 2026. Sources: nvd.nist.gov, hub.ivanti.com, cisa.gov. Figures are pulled from public vendor and security data and refreshed automatically.
Back to all news & advisories