Ivanti Connect Secure Zero-Day Chain Reaches Root

Ivanti Connect Secure zero-day chain CVE-2026-104935: a brushed-aluminium case with a broken blue tamper seal on a dark wooden floor, headline “Three Ivanti Zero-Days, One Root Shell”

Volexity found an Ivanti Connect Secure zero-day chain that gave one attacker unauthenticated root on a VPN appliance running the latest build at the time. Ivanti has fixed two of the three flaws. As of October 14, the third, the privilege escalation that turns a web-server foothold into root, has no fix. Ivanti’s own Integrity…

Read More