SecuritySecurityWeekabout 1 hour ago
Ivanti Warns of Exploited Zero-Day Chain
2 min read
Ivanti warned customers on Tuesday that a zero-day vulnerability, CVE-2026-104935, was exploited by threat actor UTA0576. The group chained three flaws to gain root access on fully patched ICS appliances. Ivanti released patches for versions 22.8R2.5, 25.1.1.2, 25.1.3.0, and 25.1.3.1, though one privilege escalation issue remains unpatched.
Level
Hype check
Tap to vote and see what everyone thinks.
