High 8.6
CVE-2026-104935
In-the-Wild Exploitation of Ivanti Connect Secure Vulnerability CVE-2026-104935 by UTA0576
Vendor / product: Ivanti Connect Secure
Event date: 2026-10-03
Public PoC: Yes
First tracked by RiskWire: 2026-10-09
Named threat actors
UTA0576
Sources & citations (131)
- Nginx UI RCE Vulnerability Disclosed With PoC Exploit Code securityonline.info · 2026-10-09
- Max severity SonicWall SMA1000 flaw now exploited in attacks bleepingcomputer.com · 2026-10-09
- BC: SonicWall SMA1000'deki en yüksek önem derecesine sahip açık saldırılarda kullanılıyor r10.net · 2026-10-09
- SonicWall SMA1000 Vulnerability Exploited in the Wild securityonline.info · 2026-10-09
- SonicWall SSRF bug rated 10.0 exploited in SMA1000 Appliance Work Place scworld.com · 2026-10-09
- SonicWall SMA1000-kwetsbaarheid actief misbruik bij aanvallen security.nl · 2026-10-09
- SonicWall SMA1000: Sicherheitslücke wird bereits ausgenutzt all-about-security.de · 2026-10-09
- SonicWall parchea falla crítica SSRF en appliances SMA1000 — sin evidencia de explotación aún ciberseguridadlatam.com · 2026-10-09
- SonicWall SMA1000 flaw moves from patch to active exploitation news-pravda.com · 2026-10-10
- When the Remote Access Gateway Becomes the Attack Path expertinthecloud.co.za · 2026-10-09
- Хакеры нацелились на интерфейс WorkPlace в шлюзах SonicWall SMA1000 itzine.ru · 2026-10-09
- SonicWall SMA1000 CVE-2026-102255 Exploitation Attempts Reported After Emergency Patch + Video undercodenews.com · 2026-10-09
- Attackers Are Already Exploiting SonicWall's Freshly Patched Max-Severity SMA1000 Flaw itsecuritynews.info · 2026-10-10
- 🔒 Atlassian CVE-2026-21589 Exploited Hours After Public Disclosure tsecurity.de · 2026-10-10
- 🔒 Public Exploit Reveals Critical AnyDesk Linux Vulnerability That Could Allow Root Access tsecurity.de · 2026-10-10
- Greg Winiarski WPAdverts Plugin up to 2.3.4 on WordPress cross site scripting (EUVD-2026-96324) tsecurity.de · 2026-10-10
- 🔒 IT Security News Roundup: 2026-10-10 Afternoon tsecurity.de · 2026-10-10
- 🔒 IT Security News Hourly Summary 2026-10-10 18h : 3 posts tsecurity.de · 2026-10-10
- Greg Winiarski WPAdverts Plugin up to 2.3.4 on WordPress cross site scripting (EUVD-2026-96325) tsecurity.de · 2026-10-10
- Devin Walker Rollback Plugin up to 3.1.2 on WordPress information disclosure (EUVD-2026-96326) tsecurity.de · 2026-10-10
+111 more sources
References
See CVE-2026-104935 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →