Ivanti Connect Secure zero-day chain reportedly gave attackers unauthenticated root access

An October 29 advisory details a three-flaw chain reportedly used October 3–5 against fully patched appliances to obtain root access, including CVE-2026-104935. It provides CVE identifiers and patch versions and warns that clean integrity checks may not rule out compromise; customer impact and attacker objectives remain uncertain.