Ivanti VPN and Windows Shell Zero-Days Confirmed Exploited in the Wild
Ivanti VPN and Windows Shell Zero-Days Confirmed Exploited in the Wild
On 14 October 2026, CISA confirmed active exploitation of two critical zero-day vulnerabilities: CVE-2026-104935 in Ivanti Connect Secure VPN and CVE-2026-96951 in Windows Shell. The Ivanti flaw allows complete authentication bypass and root-level command execution without credentials, whilst the Windows vulnerability permits command injection across the operating system. Both vulnerabilities were added to CISA’s Known Exploited Vulnerabilities catalogue, confirming they are being used in live attacks. Security firm…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.