Ivanti ICS Zero-Day Exploited After Partial Patch Leaves Window Open

Threat actors are exploiting CVE-2026-104935, a high-severity authentication bypass and RCE vulnerability in Ivanti ICS, which was only partially patched in July, leaving a window for exploitation. The incident underscores persistent challenges in vendor patch management and the risk of incomplete fixes. The full scope of affected deployments and active exploitation remains unclear.