OTX Threat: Ivanti CVE-2026-104935: Zero-Day Chain Exploited in Operation Innovate

Ivanti has released emergency security updates after attackers exploited a chain of three zero-day vulnerabilities in Connect Secure VPN appliances to gain root-level access without authentication. The attack began on October 3, targeting an appliance running version 22.8R2.4. Two vulnerabilities are tracked as CVE-2026-104935 with a CVSS score of 8.6, involving an authentication bypass and remote CVEs: CVE-2026-104935