Incident feed · ShipSecurely

VPN incidents

2 incidents tagged VPN, newest first.

Stack

Authentication bypassOct 13, 2026
Ivanti Connect Secure zero-day was used to run commands
On October 13, 2026, CISA said attackers were exploiting CVE-2026-104935, an authentication bypass in Ivanti Connect Secure that allows remote, unauthenticated command execution. CISA added it to the exploited-vulnerabilities catalog the same day.
- VPN
Remote code executionSep 27, 2026
Citrix NetScaler vulnerabilities were exploited on unmitigated deployments
On September 27, 2026, Citrix published fixes for NetScaler ADC and NetScaler Gateway. CVE-2026-88771 lets an unauthenticated attacker run commands on a default deployment, and Citrix says exploits of that bug and CVE-2026-88772 have been observed.
- Citrix
- VPN