Ivanti VPN bug added to US 'actively exploited' list - but the detail is thin

CISA says attackers are already using CVE-2026-104935 against Ivanti Connect Secure, yet almost nothing about how has been made public.