Set of Sun 18 Oct 2026

01 · Exploited CVE of the day

Ivanti · Connect Secure

CVE-2026-104935

Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

In CISA KEV since

13 Oct 2026

Ransomware use

Unknown

EPSS

0.260 · top 2%scored 16 Oct 2026

CVSS

8.6v3.1 · CNA

CISA remediation due 16 Oct 2026

• Score it in CVSS →
• EPSS 30-day trend
• NVD entry ↗

Picked: highest EPSS among KEV additions of the last 7 days, ransomware use as tie-break.