# CISA Directs Agencies to Patch Ivanti Flaw

CISA added the actively exploited Ivanti Connect Secure vulnerability CVE-2026-104935 to its Known Exploited Vulnerabilities catalog on October 13, 2026, and directed Federal Civilian Executive Branch agencies to remediate affected systems by October 16—one day from today. CISA also set an October 16 deadline for federal agencies to remediate an actively exploited Microsoft Windows Shell flaw, CVE-2026-96951. Ivanti has released fixes for affected product branches; one signal warns that patching CVE-2026-104935 may not close a separate privilege-escalation path, so patching should be paired with compromise assessment and recovery actions.

- Federal contractors supporting affected agencies should identify vulnerable Ivanti and Windows deployments, verify patch status, and coordinate the agencies’ remediation ahead of the October 16 deadline.
- For Ivanti appliances, the signals recommend investigating for compromise, including forensic review and credential rotation; CISA’s rebuild guidance is also cited. A patch alone may not address the separate privilege-escalation path described in one signal.
- The incidents may increase demand for incident response and longer-term secure-access services, including zero-trust planning. The signals identify no specific solicitation, award, or contract value.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity, Regulatory Compliance
**Published:** October 14, 2026

### Government Entities
- Cybersecurity and Infrastructure Security Agency (CISA)
- Federal Civilian Executive Branch agencies (FCEB)

### Vendors
- Ivanti (Product manufacturer)
- Microsoft ()
- Citrix ()

### Sources
- [Ivanti VPN Zero-Day CVE-2026-104935: CVSS 8.6, Root Open](https://shattered.io/ivanti-connect-secure-cve-2026-104935-zero-day) - shattered.io
- [Ivanti Connect Secure Zero-Day: 3 Flaws Chain to Root [2026]](https://tech-insider.org/ivanti-connect-secure-citrix-netscaler-zero-day-2026) - https://tech-insider.org/
- [U.S. CISA adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog - Security Affairs](https://securityaffairs.com/200965/hacking/u-s-cisa-adds-microsoft-windows-shell-flaw-to-its-known-exploited-vulnerabilities-catalog.html) - Security Affairs