VDB
CVE-2026-104935
CVE-2026-104935
PUBLISHED
KEV
As of October 13, 2026, Ivanti is affected by vulnerabilities in the following products: Ivanti Connect Secure Version 25.1.1.1 and prior Version 25.2.2 and prior Version 22.8R2.4 and prior Ivanti Neurons Patch for Intune Versions prior to September 16, 2026 Ivanti Xtraction Version 2026.2.1 and prior On October 13, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-CVE-2026-104935 to their Known Exploited Vulnerabilities (KEV) Database. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
EPSS 25.98% · 98.0th percentile
Risk Scores
EPSS Score
25.98%
98.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Version | Version 25.2.2 and prior | |
| Version | Version 25.1.1.1 and prior | |
| Version | Version 2026.2.1 and prior | |
| Versions | Versions prior to September 16, 2026 | |
| Version | Version 22.8R2.4 and prior |
Timeline
- CVE Published
- Oct 13, 2026 CISA KEV Added
- Oct 13, 2026 VulnCheck KEV Exploitation
- Oct 13, 2026 PoC Published
- Oct 13, 2026 Coalition ESS Score
- Oct 14, 2026 EPSS Score
References
- https://cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av26-1035 advisory
- https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935?language=en_US vendor
- https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-Multiple-CVEs?language=en_US vendor
- https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-Patch-for-Intune-October-2026?language=en_US vendor
- https://forums.ivanti.com/s/searchallcontent?language=en_US#tab=All&sortCriteria=date%20descending&f-sfkbknowledgearticletypec=Security%20Advisory vendor
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-104935 advisory