Authentication Bypass by Spoofing Vulnerability
Exploited in the wild. CISA added it to its Known Exploited Vulnerabilities list on 13 Oct 2026.
89%
Reading the vendor advisory
Fix it in your code
Each opens with a short prompt that points at Global Hack Map's public runbook for CVE-2026-104935. Nothing runs until you send it.
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.
You are affected if
The fix