CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure

CISA reports active exploitation of multiple vulnerabilities added to its Known Exploited Vulnerabilities (KEV) Catalog in late September and October 2026. The most urgent item is CVE-2026-104935, an Ivanti Connect Secure zero-day authentication bypass enabling remote unauthenticated command execution, credential theft, and data exfiltration; CISA warns that compromise evidence may require network and memory forensics because commands execute in memory. Other affected products include Microsoft Windows, Citrix NetScaler, Zammad, Fortinet FortiMail, Cisco Catalyst SD-WAN Manager, and Apple מוצר