CISA urges immediate patching of exploited Ivanti Connect Secure flaw CVE-2026-104935
Remote-access gateways sit at the network perimeter, so active exploitation calls for same-day verification of version status on every affected appliance, not a scheduled patch cycle. Organisations still running the 22.x branch also face a migration decision under time pressure. Security teams should check gateway logs for signs of compromise that predate patching, and should ask managed service providers and critical third parties for confirmation that they have patched.
What Happened
CISA said it is aware of Ivanti's disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA added the vulnerability to its Known Exploited Vulnerabilities Catalog on 13 October 2026. It urged organisations with affected appliances to update to the latest version immediately and to review Ivanti's 25.x upgrade and migration guidance.
Why It Matters
Remote-access gateways sit at the network perimeter, so active exploitation calls for same-day verification of version status on every affected appliance, not a scheduled patch cycle. Organisations still running the 22.x branch also face a migration decision under time pressure. Security teams should check gateway logs for signs of compromise that predate patching, and should ask managed service providers and critical third parties for confirmation that they have patched.
Sources
- Cybersecurity and Infrastructure Security Agency (opens in a new tab): CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure (2026-10-13)
More From This Briefing
- EU AI Office sends information requests to OpenAI and Anthropic over lab incidents in first AI Act enforcement test
- Meta launches Muse Wonder frontier models as paid products, keeping its strongest model off the API
- European Commission consults on draft AI Act rules for penalty proceedings and company safeguards
- ByteDance in advanced talks to buy custom MediaTek AI chips for its data centres, Bloomberg reports
This story is part of the Laurenceo Intelligence briefing for 15 October 2026, a daily sourced briefing on AI, technology and enterprise risk published in Bermuda by Laurenceo, founded by Jorai Laurenceo. It is produced by an automated research pipeline and checked before publication; how this is made. General information only, not legal, regulatory or financial advice.