Skip to content
Heist/ feed
Back to feed
UnratedFix available

Vulnérabilité dans Ivanti Connect Secure (ICS)

Type: patchSources: CERT-FR alerts

CERT-FR reports that CVE-2026-104935 affects specified Ivanti Connect Secure versions and is actively exploited. Upgrade to the fixed firmware versions listed below; the bulletin also advises isolation and investigation of potentially compromised appliances.

Products
Connect Secure (ICS)
Affected versions
22.8Rx antérieures à 22.8R2.5, 25.1.1.x antérieures à 25.1.1.2, 25.1.3.x antérieures à 25.1.3.1
Fixed versions
22.8R2.5, 25.1.1.2, 25.1.3.1
CVEs
CVE-2026-104935
Confirmed fixed CVEs
Not specified
Updated in this feed
31 Oct 2026, 07:34 UTC · Revision 1

Source evidence

Vulnérabilité dans Ivanti Connect Secure (ICS)

official-cert-fr-alerts · Original source

Published 14 Oct 2026, 00:00 UTC

CERT-FR reports that CVE-2026-104935 affects specified Ivanti Connect Secure versions and is actively exploited. Upgrade to the fixed firmware versions listed below; the bulletin also advises isolation and investigation of potentially compromised appliances.

procéder à une montée de version du micrologiciel (firmware) si le correctif est disponible

Connect Secure (ICS)

Fixed versions: 22.8R2.5, 25.1.1.2, 25.1.3.1

Complete source record
{
  "id": "4c3efb860e633aba8f2c8b370bbf506bb3313fa36c92955471749a0bfcd7a211",
  "url": "https://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-013/",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "Vulnérabilité dans Ivanti Connect Secure (ICS)",
    "summary": "CERT-FR reports that CVE-2026-104935 affects specified Ivanti Connect Secure versions and is actively exploited. Upgrade to the fixed firmware versions listed below; the bulletin also advises isolation and investigation of potentially compromised appliances.",
    "evidence": "procéder à une montée de version du micrologiciel (firmware) si le correctif est disponible",
    "products": [
      {
        "name": {
          "value": "Connect Secure (ICS)",
          "evidence": "Connect Secure (ICS) version 22.8Rx antérieures à 22.8R2.5"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "22.8R2.5",
            "evidence": "Connect Secure (ICS) version 22.8Rx antérieures à 22.8R2.5"
          },
          {
            "value": "25.1.1.2",
            "evidence": "Connect Secure (ICS) version 25.1.1.x antérieures à 25.1.1.2"
          },
          {
            "value": "25.1.3.1",
            "evidence": "Connect Secure (ICS) version 25.1.3.x antérieures à 25.1.3.1"
          }
        ],
        "affected_versions": [
          {
            "value": "22.8Rx antérieures à 22.8R2.5",
            "evidence": "Connect Secure (ICS) version 22.8Rx antérieures à 22.8R2.5"
          },
          {
            "value": "25.1.1.x antérieures à 25.1.1.2",
            "evidence": "Connect Secure (ICS) version 25.1.1.x antérieures à 25.1.1.2"
          },
          {
            "value": "25.1.3.x antérieures à 25.1.3.1",
            "evidence": "Connect Secure (ICS) version 25.1.3.x antérieures à 25.1.3.1"
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-104935",
        "evidence": "Ivanti indique que cette vulnérabilité CVE-2026-104935 est activement exploitée."
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-cert-fr-alerts",
  "document_id": 23324,
  "published_at": "2026-10-14T00:00:00+00:00"
}