Serial number: AV26-1035
Date: October 13, 2026
As of October 13, 2026, Ivanti is affected by vulnerabilities in the following products:
- Ivanti Connect Secure
- Version 25.1.1.1 and prior
- Version 25.2.2 and prior
- Version 22.8R2.4 and prior
- Ivanti Neurons Patch for Intune
- Versions prior to September 16, 2026
- Ivanti Xtraction
- Version 2026.2.1 and prior
On October 13, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-CVE-2026-104935 to their Known Exploited Vulnerabilities (KEV) Database.
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.