CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
Summary + source link. No paywalls, no tracking.