maxprog-svg/CVE-2026-104935

PoC

CVE-2026-104935 — Ivanti Connect Secure / Pulse Secure RCE Exploit

view exploit source poc_in_githubauthor maxprog-svgpublished 2026-10-22catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2026-104935US—OT criticalKEV
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan