CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts

CISA has issued an urgent advisory for organizations to update their Ivanti Connect Secure (ICS) appliances due to an actively exploited authentication bypass vulnerability tracked as CVE-2026-104935 with a CVSS score of 8.6. The flaw allows attackers to bypass authentication on affected ICS deployments. Honeypot data has recorded 105 exploit attempts against this vulnerability, indicating active threat actor interest. CISA is urging immediate patching to the latest version of Ivanti Connect Secure. The vulnerability poses significant risk to organizations using ICS for remote access and VPN connectivity.