CYBERSECURITYTRACKER
TRACKING
Permanent story citation

Ivanti security advisory (AV26-1035)

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10168

As cited

Copy frozen at (site build).

vulnerabilities

Ivanti security advisory (AV26-1035)

Ivanti released a security advisory on October 13, 2026, covering vulnerabilities across Connect Secure, Neurons Patch for Intune, and Xtraction products. The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-104935 to its Known Exploited Vulnerabilities (KEV) Database on the same date, indicating active exploitation in the wild.

Why it matters: Organizations running Ivanti Connect Secure, Neurons Patch for Intune, or Xtraction should immediately apply available patches, as CVE-2026-104935 is confirmed as actively exploited.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Ivanti security advisory (AV26-1035)

Ivanti released a security advisory on October 13, 2026, covering vulnerabilities across Connect Secure, Neurons Patch for Intune, and Xtraction products. The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-104935 to its Known Exploited Vulnerabilities (KEV) Database on the same date, indicating active exploitation in the wild.

Why it matters: Organizations running Ivanti Connect Secure, Neurons Patch for Intune, or Xtraction should immediately apply available patches, as CVE-2026-104935 is confirmed as actively exploited.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary