Main Vulnerability Database Vulnerabilities #VU154226

Authentication Bypass by Spoofing in Ivanti Connect Secure (formerly Pulse Connect Secure) - CVE-2026-104935

Published: October 13, 2026

Vulnerability identifier: #VU154226

CSH Severity: High

CVSS v4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-104935

CWE-ID: CWE-290

Exploitation vector: Remote access

Exploit availability: The vulnerability is being exploited in the wild

Vulnerability details

The vulnerability allows a remote attacker to bypass authentication.

The vulnerability exists due to an error in ICS. A remote attacker can perform a spoofing attack and bypass authentication process.

Note, the vulnerability is being actively exploited in the wild.

Ivanti Connect Secure (formerly Pulse Connect Secure)

Install updates from vendor's website.

Ivanti Connect Secure (formerly Pulse Connect Secure) - addressed in versions 22.8R2.5, 25.1.1.2, 25.1.3.0