CVE-2026-104935

CWE-290

Final Priority

Critical

95.7

Raw RPS

Description

Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.

Source: NVD

CVSS: 8.6; High · v3.1
EPSS: 25.98%; Probability of exploitation in the next 30 days (FIRST) · Percentile: 97.9%
CISA KEV: In CISA KEV since Oct 2026; Confirmed exploitation in the wild (CISA KEV)
Upstream fix commit: No verified fix commit in DevSecure data; Sources: MoreFixes, FreshFixes
SSVC inputs (CISA): Exploitation: Active · Automatable: Yes · Technical impact: Total; CISA's assessed SSVC inputs, not a decision. A decision also needs your mission and public well-being context. Context only; not part of the RPS score.
Weakness: CWE-290
Published: 13 Oct 2026; Last modified 13 Oct 2026

How to read these signals: RPS · EPSS · CISA KEV · Data sources

What would change this priority?

↓Would become High if the EPSS percentile falls below 85.3%, causing the raw RPS to fall below 90.

Explains the published RPS formula and priority rules; it doesn't change the score. How priority works

Get this score from the API

curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
  https://api.intelligence.devsecure.io/api/v1/rps/CVE-2026-104935

Replace the placeholder with your key. Get a free API key or rank your own CVEs.

Data as of 23 Oct 2026, 05:17 UK time

This product uses the NVD API but is not endorsed or certified by the NVD. Data sources and licences

CVE-2026-104935

Description

Signals

What would change this priority?

Get this score from the API