A patch that was supposed to close a dangerous hole in Ivanti Connect Secure has instead left a back stairwell open. On October 13, 2026, Ivanti disclosed CVE-2026-104935, an authentication-bypass
Cisa
Federal agencies have until Oct. 16 to patch a high-severity flaw in Ivanti Connect Secure VPN appliances, after the Cybersecurity and Infrastructure Security Agency added the bug to its Known