Skip to content

CVE-2026-96951

CVE

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
October 14, 2026
Last Seen
October 14, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

On October 13, 2026, Ivanti disclosed a high-severity zero-day vulnerability tracked as CVE-2026-104935, affecting its Connect Secure (ICS) VPN appliances. This authentication bypass flaw allows unauthenticated attackers to execute arbitrary commands, with exploitation confirmed since at least Octob...

CVE-2026-70229 is a critical vulnerability in Windows Active Directory Domain Services that allows unauthenticated attackers to execute arbitrary code by sending specially crafted packets over the network. The flaw, rated CVSS 8.1, is due to incorrect authorization (CWE-863) and affects a wide range...

Public Exploits

Checking GitHub for proof-of-concept code…