Ivanti Connect Secure zero-day chain exploited for root access, one flaw still unpatched
Ivanti has patched CVE-2026-104935 in Connect Secure after Volexity found a threat actor chaining it with a still-unpatched privilege escalation bug to gain root on VPN appliances.