Ivanti · Connect Secure
Updated October 17, 2026
Ivanti Connect Secure contains a spoofing‑based authentication bypass that permits an unauthenticated remote actor to execute arbitrary system commands. The flaw bypasses all standard login checks, making it a high‑impact remote code execution vector.
Exploitation can lead to full system compromise, enabling ransomware deployment, credential theft, or use of the VPN gateway as a pivot point into the internal network.
Apply Ivanti’s emergency patch immediately; if patching is delayed, block external VPN access, enforce strict IP allow‑lists, and monitor for anomalous command execution.
More active vulnerabilities