Ivanti Connect Secure <= 22.8R2.4 - Authentication Bypass via X-DSCGI-PATH Header

Ivanti Connect Secure VPN appliances contain an authentication bypass vulnerability in how the appliance routes requests from front- and back-end processes to CGI script handlers. The URL path is used to determine whether a request is allowed welcome.cgi is public, while the X-DSCGI-PATH header...

PT-2026-133516

Name of the Vulnerable Software and Affected Versions Ivanti Connect Secure versions prior to 25.1.1.3 Ivanti Connect Secure versions prior to 22.8R2.6 Description The software uses predictable filenames, which allows a remote authenticated attacker to upload files containing controlled content t...

Exploit for Authentication Bypass by Spoofing in Ivanti Connect_Secure

CVE-2026-104935 — Ivanti Connect Secure / Pulse Secure RCE Exp...

Exploit for Authentication Bypass by Spoofing in Ivanti Connect_Secure

ivanti-cve-2026-104935-check Unauthenticated detection for th...

Ivanti Connect Secure 25.1.2.2 Authentication Bypass

Ivanti Connect Secure versions 25.1.1.1 and earlier, 25.1.2.2 and earlier, and 22.8R2.4 and earlier contain an authentication bypass vulnerability. This detection tool checks whether the X-DSCGI-PATH header reaches a protected handler without writing to the target...