Ivanti
Vulnerability activity for Ivanti: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 3
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 1
- With exploit code
- 1
Last 90 days
- CVEs
- 6
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 1
- With exploit code
- 1
Last 365 days
- CVEs
- 26
- Critical (CVSS 9+)
- 6
- Exploited (CISA KEV)
- 6
- With exploit code
- 5
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 8.6HighOct 13, 2026Ivanti Connect Secure Auth bypass / access controlCVE-2026-104935Affected: Ivanti Connect Secure authentication servers. Attacker gains: Ability to bypass authentication and access sensitive data. Recommended action: Apply Ivanti Connect Secure version 12.1.3 or later to remediate the vulnerability.Added to KEV Oct 13, 2026Exploited26% likelyExploit codeNucleiDetection
- 10.0CriticalJun 11, 2026Ivanti Sentry Code / command injectionCVE-2026-10520Ivanti Sentry An attacker gains Remote Code Execution Update Ivanti Sentry to the latest version.Added to KEV Jun 11, 2026Exploited100% likelyExploit codeNucleiDetection
- 7.2HighMay 7, 2026Ivanti Endpoint Manager Mobile (EPMM)CVE-2026-6973Ivanti Endpoint Manager Mobile (EPMM) server. An attacker gains remote code execution. Update EPMM to the latest version and apply patches.Added to KEV May 7, 2026Exploited34% likely
- 9.8CriticalApr 8, 2026Ivanti Endpoint Manager Mobile (EPMM) Code / command injectionCVE-2026-13401. Ivanti Endpoint Manager Mobile (EPMM) is affected. 2. An attacker gains arbitrary code execution and access to sensitive information. 3. Apply the latest security patches and update EPMM to the recommended version.Added to KEV Apr 8, 2026Exploited99% likelyExploit codeMetasploit · NucleiDetection
- 8.6HighMar 9, 2026Ivanti Endpoint Manager (EPM) Auth bypass / access controlCVE-2026-1603Ivanti Endpoint Manager EPM servers and clients. An attacker gains unauthenticated access to the EPM console and potentially the entire network. Patch Ivanti Endpoint Manager to version 2023.3 or later, and ensure all users update their clients.Added to KEV Mar 9, 2026Exploited88% likelyExploit codeNucleiDetection
- 9.8CriticalJan 29, 2026Ivanti Endpoint Manager Mobile (EPMM) Code / command injectionCVE-2026-1281(1) Ivanti Endpoint Manager Mobile (EPMM) server. (2) An attacker can execute arbitrary code with elevated privileges. (3) Update to version 2023.3.1 or later and apply recommended security configurations.Added to KEV Jan 29, 2026Exploited99% likelyExploit codeMetasploit · NucleiDetection
- 5.3MediumMay 13, 2025Ivanti Endpoint Manager Mobile (EPMM) Auth bypass / access controlCVE-2025-44271. Ivanti Endpoint Manager Mobile (EPMM) server and devices enrolled in the EPMM system. 2. An attacker gains unauthorized access to EPMM-protected resources and sensitive data. 3. Apply the latest security patches and updates provided by Ivanti to mitigate this vulnerability.Added to KEV May 19, 2025 · 5 days after publicationExploited100% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
- 7.2HighMay 13, 2025Ivanti Endpoint Manager Mobile (EPMM) Code / command injectionCVE-2025-4428Ivanti Endpoint Manager Mobile (EPMM) An attacker gains arbitrary code execution. Update Ivanti Endpoint Manager Mobile to version 12.1.8.0 or later.Added to KEV May 19, 2025 · 5 days after publicationExploited88% likelyExploit codeMetasploitDetection
- 9.0CriticalApr 3, 2025Ivanti Connect Secure, Policy Secure, and ZTA Gateways Memory corruptionCVE-2025-22457Ivanti Connect Secure, Policy Secure, and ZTA Gateways. Unauthorized code execution and potentially arbitrary code execution. Patch to version 2022.1.0.0 or later, or apply mitigations as recommended by Ivanti.Added to KEV Apr 4, 2025 · same day as publicationExploited100% likelyExploit codeMetasploit
- 9.8CriticalJan 14, 2025Ivanti Endpoint Manager (EPM) Path traversal / file handlingCVE-2024-13159Ivanti Endpoint Manager (EPM) web interface. An attacker gains unauthenticated remote code execution (RCE) and potential access to sensitive data. Update to Ivanti Endpoint Manager 2023.3.3 or later, and ensure proper authentication and access controls are in place.Added to KEV Mar 10, 2025 · 54 days after publicationExploited100% likelyExploit codeNucleiDetection
- 9.8CriticalJan 14, 2025Ivanti Endpoint Manager (EPM) Path traversal / file handlingCVE-2024-13160Ivanti Endpoint Manager (EPM) server and clients. An attacker gains remote code execution and full access to the system. Update Ivanti Endpoint Manager to the latest version and apply the recommended patches.Added to KEV Mar 10, 2025 · 54 days after publicationExploited91% likelyExploit codeNucleiDetection
- 9.8CriticalJan 14, 2025Ivanti Endpoint Manager (EPM) Path traversal / file handlingCVE-2024-13161Ivanti Endpoint Manager (EPM) An attacker gains access to arbitrary files on the system. Patch to the latest version of Ivanti EPM.Added to KEV Mar 10, 2025 · 54 days after publicationExploited90% likelyExploit codeNucleiDetection
- 9.0CriticalJan 8, 2025Ivanti Connect Secure, Policy Secure, and ZTA Gateways Memory corruptionCVE-2025-0282Ivanti Connect Secure, Policy Secure, and ZTA Gateways are affected. An attacker gains remote code execution and potential lateral movement capabilities. Patch Ivanti Connect Secure, Policy Secure, and ZTA Gateways to version 5.1.1 or later.Added to KEV Jan 8, 2025 · same day as publicationExploited100% likelyExploit codeExploit-DB · NucleiDetection
- 6.5MediumOct 8, 2024Ivanti Cloud Services Appliance (CSA) SQL injectionCVE-2024-9379Ivanti Cloud Services Appliance (CSA) An attacker gains unauthorized access to sensitive data and system administration capabilities. Update Ivanti Cloud Services Appliance to the latest version and apply recommended security patches.Added to KEV Oct 9, 2024 · same day as publicationExploited44% likely
- 7.2HighOct 8, 2024Ivanti Cloud Services Appliance (CSA) Code / command injectionCVE-2024-9380Ivanti Cloud Services Appliance (CSA) OS, Attacker gains unauthorized access to the system, Update to the latest version of Ivanti CSA OS.Added to KEV Oct 9, 2024 · same day as publicationExploited58% likelyDetection
- 9.6CriticalMay 31, 2024Ivanti Endpoint Manager (EPM) SQL injectionCVE-2024-29824Affected: Ivanti Endpoint Manager (EPM) and possibly other Ivanti products using the same codebase. Attacker gains: Unauthorized access to sensitive data and potentially execution of arbitrary code. Recommended action: Apply the latest patch or update from Ivanti as soon as possible to mitigate this vulnerability.Added to KEV Oct 2, 2024 · 123 days after publicationExploited100% likelyExploit codeMetasploit · NucleiDetection
- 9.8CriticalAug 13, 2024Ivanti Virtual Traffic Manager Auth bypass / access controlCVE-2024-7593Ivanti Virtual Traffic Manager An attacker gains access to administrative privileges. Patch Ivanti Virtual Traffic Manager to the latest version available.Added to KEV Sep 24, 2024 · 41 days after publicationExploited100% likelyExploit codeMetasploit · NucleiDetection
- 9.4CriticalSep 19, 2024Ivanti Cloud Services Appliance (CSA) Path traversal / file handlingCVE-2024-8963Ivanti Cloud Services Appliance (CSA) software. An attacker gains remote code execution and unauthorized access to sensitive data. Update the Ivanti Cloud Services Appliance (CSA) software to the latest version available.Added to KEV Sep 19, 2024 · same day as publicationExploited99% likelyExploit codeNucleiDetection
- 7.2HighSep 10, 2024Ivanti Cloud Services Appliance Code / command injectionCVE-2024-8190(1) Ivanti Cloud Services Appliance is affected, specifically its OS command injection vulnerability. (2) An attacker gains remote code execution, allowing them to manipulate the appliance's functionality. (3) Update the Ivanti Cloud Services Appliance to the latest version to mitigate this vulnerability.Added to KEV Sep 13, 2024 · 2 days after publicationExploited89% likelyDetection
- 9.8CriticalDec 8, 2021Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code / command injectionCVE-2021-445291. Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) is affected. 2. An attacker gains arbitrary code execution. 3. Apply the latest patches and update to version 2021.2 or later.Added to KEV Mar 25, 2024 · 838 days after publicationExploited99% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
- 8.2HighJan 31, 2024Ivanti Connect Secure, Policy Secure, and Neurons SSRFCVE-2024-21893Ivanti Connect Secure, Policy Secure, and Neurons products. An attacker gains unauthorized access to internal systems or data. Patch Ivanti Connect Secure, Policy Secure, and Neurons to the latest version available.Added to KEV Jan 31, 2024 · same day as publicationExploited100% likelyExploit codeMetasploit · NucleiDetection
- 10.0CriticalAug 15, 2023Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Auth bypass / access controlCVE-2023-35082Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core. An attacker gains unauthorized access to sensitive information and system control. Update to the latest version of Ivanti EPMM and MobileIron Core.Added to KEV Jan 18, 2024 · 155 days after publicationExploited100% likelyExploit codeNucleiDetection
- 9.1CriticalJan 12, 2024Ivanti Connect Secure and Policy Secure Code / command injectionCVE-2024-21887Ivanti Connect Secure and Policy Secure An attacker gains remote code execution Update to the latest version of Ivanti Connect Secure and Policy Secure.Added to KEV Jan 10, 2024 · same day as publicationExploited100% likelyExploit codeMetasploit · NucleiDetection
- 8.2HighJan 12, 2024Ivanti Connect Secure and Policy Secure Auth bypass / access controlCVE-2023-46805Ivanti Connect Secure and Policy Secure. An attacker gains unauthorized access to the system. Update to version 2023.2.2 or later to remediate the vulnerability.Added to KEV Jan 10, 2024 · same day as publicationExploited100% likelyExploit codeMetasploit · NucleiDetection
- 9.8CriticalAug 21, 2023Ivanti Sentry Auth bypass / access controlCVE-2023-38035Ivanti Sentry, a web-based authentication and authorization system, is affected. An attacker gains unauthorized access to sensitive data and system resources. Update Ivanti Sentry to the latest version to mitigate this vulnerability.Added to KEV Aug 22, 2023 · same day as publicationExploited100% likelyExploit codeMetasploit · NucleiDetection
Recent
- 7.0HighOct 15, 2026Ivanti Connect Secure Privilege escalationCVE-2026-111357(1) Ivanti Connect Secure 22.8R2.4 and possibly earlier versions of the software. (2) An attacker gains root privileges on the affected system. (3) Update to the latest version of Ivanti Connect Secure 22.8R2.5 or later.
- 9.9CriticalOct 13, 2026Ivanti Neurons Patch for IntuneCVE-2026-109412Ivanti Neurons Patch for Intune is affected. An attacker gains sensitive authentication information. Patch Ivanti Neurons Patch for Intune with the latest security updates to remediate this vulnerability.
- 8.6HighOct 13, 2026Ivanti Connect Secure Auth bypass / access controlCVE-2026-104935Affected: Ivanti Connect Secure authentication servers. Attacker gains: Ability to bypass authentication and access sensitive data. Recommended action: Apply Ivanti Connect Secure version 12.1.3 or later to remediate the vulnerability.Exploited26% likelyExploit codeNucleiDetection
- 8.1HighSep 8, 2026Ivanti Sentry Auth bypass / access controlCVE-2026-83527An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain administrative level access.1.8% likely
- 8.8HighSep 8, 2026Ivanti Endpoint Manager Mobile Auth bypass / access controlCVE-2026-18851Affected: Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4. Attacker gains: Remote authenticated attacker can escalate their privileges to admin. Recommended action: Upgrade to version 12.10.0.0, 12.9.0.2, or 12.8.0.4 or later.1.2% likely
- –UnscoredAug 11, 2026IvantiADV-ivanti-1001e5b4fb82Ivanti releases standard security patches on the second Tuesday of every month. In today’s rapidly evolving technology and threat landscape, we believe responsible transparency should be a cornerstone of any product security program. AI is compressing the time-to-exploit , and Ivanti uses leading technologies to proactively find and fix issues ––including integrating advanced LLMs into our Engineering and product security to enhance the capabilities of our teams. Our philosophy is simple: discov
- 7.7HighJul 14, 2026Ivanti xtraction Path traversal / file handlingCVE-2026-14903Affected: Ivanti Xtraction before version 2026.2.1. Attacker gain: Remote authenticated attacker can read arbitrary files outside the web root. Recommended action: Update to version 2026.2.1 or later to remediate the vulnerability.1.2% likely
- 4.0MediumJul 14, 2026Ivanti xtractionCVE-2026-14902An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect users to arbitrary external URLs.
- 10.0CriticalJun 11, 2026Ivanti Sentry Code / command injectionCVE-2026-10520Ivanti Sentry An attacker gains Remote Code Execution Update Ivanti Sentry to the latest version.Exploited100% likelyExploit codeNucleiDetection
- 7.2HighJun 9, 2026Ivanti Endpoint Manager Mobile Code / command injectionCVE-2026-10727Affected: Ivanti EPMM before 12.9.0.1, 12.8.0.3, and 12.7.0.2 versions. Attacker gains: Ability to execute arbitrary commands as root. Recommended action: Upgrade to Ivanti EPMM 12.9.0.1 or later versions.14% likely
- 9.9CriticalJun 9, 2026Ivanti Sentry Auth bypass / access controlCVE-2026-10523(1) Ivanti Sentry before R10.5.2, R10.6.2, and R10.7.1 versions. (2) An attacker gains full administrative access to the system. (3) Update to Ivanti Sentry version R10.5.2, R10.6.2, or R10.7.1 or later.53% likely
- 8.8HighJun 1, 2026Ivanti Neurons for ITSM (On-Premises) Auth bypass / access controlCVE-2026-9614Affected: Ivanti Neurons for ITSM cloud and on-premises systems. Attacker gains: Unauthorized administrative access to the system. Recommended action: Immediately patch or update Ivanti Neurons for ITSM to the latest version.1.4% likely
- 7.2HighMay 12, 2026Ivanti Virtual Traffic Manager Code / command injectionCVE-2026-8051Affected: Ivanti Virtual Traffic Manager before version 22.9r4. Attacker gains: Remote code execution. Recommended action: Update to version 22.9r4 or later.1.9% likely
- 7.8HighMay 12, 2026Ivanti Secure Access ClientCVE-2026-7432Affected: Ivanti Secure Access Client before 22.8R6. Attacker gains: SYSTEM privileges escalation. Recommended action: Upgrade to version 22.8R6 or later.
- 4.4MediumMay 12, 2026Ivanti Secure Access Client Privilege escalationCVE-2026-7431An incorrect permission assignment for critical resource of Ivanti Secure Access Client before 22.8R6 allows a local authenticated user to read or modify sensitive log data via write access to a shared memory section.
- 9.6CriticalMay 12, 2026Ivanti Xtraction Path traversal / file handlingCVE-2026-8043Ivanti Xtraction server. An attacker gains read access to sensitive files and ability to write arbitrary HTML files. Update Ivanti Xtraction to version 2026.2 or later to remediate this vulnerability.
- 7.2HighMay 7, 2026Ivanti Endpoint Manager Mobile (EPMM)CVE-2026-6973Ivanti Endpoint Manager Mobile (EPMM) server. An attacker gains remote code execution. Update EPMM to the latest version and apply patches.Exploited34% likely
- 5.4MediumApr 14, 2026Ivanti Neurons for ITSM (On-Premise) XSSCVE-2026-4914Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to obtain limited information from other user sessions. User interaction is required.
- 5.7MediumApr 14, 2026Ivanti Neurons for ITSM (On-Premise) Auth bypass / access controlCVE-2026-4913Affected: Ivanti N-ITSM before version 2025.4. Attacker Gains: Ability to retain access to the system despite having a disabled account. Recommended Action: Update to Ivanti N-ITSM version 2025.4 or later.
- 9.8CriticalApr 8, 2026Ivanti Endpoint Manager Mobile (EPMM) Code / command injectionCVE-2026-13401. Ivanti Endpoint Manager Mobile (EPMM) is affected. 2. An attacker gains arbitrary code execution and access to sensitive information. 3. Apply the latest security patches and update EPMM to the recommended version.Exploited99% likelyExploit codeMetasploit · NucleiDetection
- 7.8HighMar 10, 2026Ivanti Desktop and Server ManagementCVE-2026-3483(1) Ivanti DSM before version 2026.1.1 (2) An attacker gains local system privileges escalation (3) Upgrade to version 2026.1.1 or later.
- 8.6HighMar 9, 2026Ivanti Endpoint Manager (EPM) Auth bypass / access controlCVE-2026-1603Ivanti Endpoint Manager EPM servers and clients. An attacker gains unauthenticated access to the EPM console and potentially the entire network. Patch Ivanti Endpoint Manager to version 2023.3 or later, and ensure all users update their clients.Exploited88% likelyExploit codeNucleiDetection
- –UnscoredFeb 10, 2026IvantiADV-ivanti-5340369c519eIvanti releases standard security patches on the second Tuesday of every month. Our vulnerability management program is central to our commitment to maintaining secure products. Our philosophy is simple: discovering and communicating vulnerabilities, and sharing that information with defenders, is not an indication of weakness; rather it is evidence of rigorous scrutiny and a proactive vulnerability management program. By aggressively seeking to identify and address vulnerabilities, our aim is t
- 9.8CriticalJan 29, 2026Ivanti Endpoint Manager Mobile (EPMM) Code / command injectionCVE-2026-1281(1) Ivanti Endpoint Manager Mobile (EPMM) server. (2) An attacker can execute arbitrary code with elevated privileges. (3) Update to version 2023.3.1 or later and apply recommended security configurations.Exploited99% likelyExploit codeMetasploit · NucleiDetection
- –UnscoredDec 9, 2025IvantiADV-ivanti-e8d39ac640d0Ivanti releases standard security patches on the second Tuesday of every month. Our vulnerability management program is central to our commitment to maintaining secure products. Our philosophy is simple: discovering and communicating vulnerabilities, and sharing that information with defenders, is not an indication of weakness; rather it is evidence of rigorous scrutiny and a proactive vulnerability management program. By aggressively seeking to identify and address vulnerabilities, our aim is t
- –UnscoredNov 11, 2025IvantiADV-ivanti-e34dfea3e2e7Ivanti releases standard security patches on the second Tuesday of every month. Our vulnerability management program is central to our commitment to maintaining secure products. Our philosophy is simple: discovering and communicating vulnerabilities, and sharing that information with defenders, is not an indication of weakness; rather it is evidence of rigorous scrutiny and a proactive vulnerability management program. By aggressively seeking to identify and address vulnerabilities, our aim is t
- –UnscoredOct 14, 2025IvantiADV-ivanti-9fc13e490449Ivanti releases standard security patches on the second Tuesday of every month. Our vulnerability management program is central to our commitment to maintaining secure products. Our philosophy is simple: discovering and communicating vulnerabilities, and sharing that information with defenders, is not an indication of weakness; rather it is evidence of rigorous scrutiny and a proactive vulnerability management program. By aggressively seeking to identify and address vulnerabilities, our aim is t
- –UnscoredSep 9, 2025IvantiADV-ivanti-16418f79c826Ivanti releases standard security patches on the second Tuesday of every month. Our vulnerability management program is central to our commitment to maintaining secure products. Our philosophy is simple: discovering and communicating vulnerabilities, and sharing that information with defenders, is not an indication of weakness; rather it is evidence of rigorous scrutiny and a proactive vulnerability management program. By aggressively seeking to identify and address vulnerabilities, our aim is t
- 6.5MediumAug 12, 2025Ivanti Virtual Application Delivery ControllerCWE-862 Auth bypass / access controlCVE-2025-8310Affected: Ivanti Virtual Application Delivery Controller before version 22.9. Attacker gain: Ability to reset admin passwords remotely and take over admin accounts. Recommended action: Update to version 22.9 or later to fix the vulnerability.
- 7.2HighAug 12, 2025Ivanti Avalanche Path traversal / file handlingCVE-2025-8297Ivanti Avalanche server before 6.4.8.8008. An attacker gains ability to execute arbitrary code on the server. Patch to version 6.4.8.8008 or later.1.3% likely
- 7.2HighAug 12, 2025Ivanti Avalanche SQL injectionCVE-2025-8296Ivanti Avalanche before version 6.4.8.8008. An attacker gains arbitrary SQL query execution and potential remote code execution capabilities. Upgrade to version 6.4.8.8008 or later to remediate the vulnerability.1.1% likely
- 7.2HighJul 8, 2025Ivanti Endpoint Manager Mobile Code / command injectionCVE-2025-6771Affected: Ivanti Endpoint Manager Mobile (EPMM) before version 12.5.0.2, 12.4.0.3, and 12.3.0.3. Attacker gains: Remote code execution. Recommended action: Update EPMM to version 12.5.0.2 or later.23% likelyDetection
- 7.2HighJul 8, 2025Ivanti Endpoint Manager Mobile Code / command injectionCVE-2025-6770Ivanti Endpoint Manager Mobile before version 12.5.0.2. An attacker gains the ability to execute arbitrary system commands. Update to version 12.5.0.2 or later.20% likely
- 8.8HighJun 10, 2025Ivanti Workspace Control Crypto / certificateCVE-2025-5353(1) Ivanti Workspace Control versions prior to 10.19.10.0. (2) An attacker gains access to stored SQL credentials. (3) Update to Ivanti Workspace Control version 10.19.10.0 or later.
- 7.3HighJun 10, 2025Ivanti Workspace Control Crypto / certificateCVE-2025-22463(1) Ivanti Workspace Control before version 10.19.10.0. (2) An attacker gains the ability to decrypt the stored environment password. (3) Update to version 10.19.10.0 or later to remediate this vulnerability.
- 8.8HighJun 10, 2025Ivanti Workspace Control Crypto / certificateCVE-2025-22455Affected: Ivanti Workspace Control before version 10.19.0.0. Attacker gain: The ability to decrypt stored SQL credentials. Recommended action: Update to version 10.19.0.0 or later.
- 7.2HighMay 13, 2025Ivanti Endpoint Manager Mobile (EPMM) Code / command injectionCVE-2025-4428Ivanti Endpoint Manager Mobile (EPMM) An attacker gains arbitrary code execution. Update Ivanti Endpoint Manager Mobile to version 12.1.8.0 or later.Exploited88% likelyExploit codeMetasploitDetection
- 5.3MediumMay 13, 2025Ivanti Endpoint Manager Mobile (EPMM) Auth bypass / access controlCVE-2025-44271. Ivanti Endpoint Manager Mobile (EPMM) server and devices enrolled in the EPMM system. 2. An attacker gains unauthorized access to EPMM-protected resources and sensitive data. 3. Apply the latest security patches and updates provided by Ivanti to mitigate this vulnerability.Exploited100% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
- 9.0CriticalApr 3, 2025Ivanti Connect Secure, Policy Secure, and ZTA Gateways Memory corruptionCVE-2025-22457Ivanti Connect Secure, Policy Secure, and ZTA Gateways. Unauthorized code execution and potentially arbitrary code execution. Patch to version 2022.1.0.0 or later, or apply mitigations as recommended by Ivanti.Exploited100% likelyExploit codeMetasploit
- 9.8CriticalJan 14, 2025Ivanti Endpoint Manager (EPM) Path traversal / file handlingCVE-2024-13161Ivanti Endpoint Manager (EPM) An attacker gains access to arbitrary files on the system. Patch to the latest version of Ivanti EPM.Exploited90% likelyExploit codeNucleiDetection
- 9.8CriticalJan 14, 2025Ivanti Endpoint Manager (EPM) Path traversal / file handlingCVE-2024-13160Ivanti Endpoint Manager (EPM) server and clients. An attacker gains remote code execution and full access to the system. Update Ivanti Endpoint Manager to the latest version and apply the recommended patches.Exploited91% likelyExploit codeNucleiDetection
- 9.8CriticalJan 14, 2025Ivanti Endpoint Manager (EPM) Path traversal / file handlingCVE-2024-13159Ivanti Endpoint Manager (EPM) web interface. An attacker gains unauthenticated remote code execution (RCE) and potential access to sensitive data. Update to Ivanti Endpoint Manager 2023.3.3 or later, and ensure proper authentication and access controls are in place.Exploited100% likelyExploit codeNucleiDetection
- 9.0CriticalJan 8, 2025Ivanti Connect Secure, Policy Secure, and ZTA Gateways Memory corruptionCVE-2025-0282Ivanti Connect Secure, Policy Secure, and ZTA Gateways are affected. An attacker gains remote code execution and potential lateral movement capabilities. Patch Ivanti Connect Secure, Policy Secure, and ZTA Gateways to version 5.1.1 or later.Exploited100% likelyExploit codeExploit-DB · NucleiDetection
- 7.2HighOct 8, 2024Ivanti Cloud Services Appliance (CSA) Code / command injectionCVE-2024-9380Ivanti Cloud Services Appliance (CSA) OS, Attacker gains unauthorized access to the system, Update to the latest version of Ivanti CSA OS.Exploited58% likelyDetection
- 6.5MediumOct 8, 2024Ivanti Cloud Services Appliance (CSA) SQL injectionCVE-2024-9379Ivanti Cloud Services Appliance (CSA) An attacker gains unauthorized access to sensitive data and system administration capabilities. Update Ivanti Cloud Services Appliance to the latest version and apply recommended security patches.Exploited44% likely
- 9.6CriticalMay 31, 2024Ivanti Endpoint Manager (EPM) SQL injectionCVE-2024-29824Affected: Ivanti Endpoint Manager (EPM) and possibly other Ivanti products using the same codebase. Attacker gains: Unauthorized access to sensitive data and potentially execution of arbitrary code. Recommended action: Apply the latest patch or update from Ivanti as soon as possible to mitigate this vulnerability.Exploited100% likelyExploit codeMetasploit · NucleiDetection
- 9.8CriticalAug 13, 2024Ivanti Virtual Traffic Manager Auth bypass / access controlCVE-2024-7593Ivanti Virtual Traffic Manager An attacker gains access to administrative privileges. Patch Ivanti Virtual Traffic Manager to the latest version available.Exploited100% likelyExploit codeMetasploit · NucleiDetection
- 9.4CriticalSep 19, 2024Ivanti Cloud Services Appliance (CSA) Path traversal / file handlingCVE-2024-8963Ivanti Cloud Services Appliance (CSA) software. An attacker gains remote code execution and unauthorized access to sensitive data. Update the Ivanti Cloud Services Appliance (CSA) software to the latest version available.Exploited99% likelyExploit codeNucleiDetection
- 7.2HighSep 10, 2024Ivanti Cloud Services Appliance Code / command injectionCVE-2024-8190(1) Ivanti Cloud Services Appliance is affected, specifically its OS command injection vulnerability. (2) An attacker gains remote code execution, allowing them to manipulate the appliance's functionality. (3) Update the Ivanti Cloud Services Appliance to the latest version to mitigate this vulnerability.Exploited89% likelyDetection
- 9.8CriticalDec 8, 2021Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code / command injectionCVE-2021-445291. Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) is affected. 2. An attacker gains arbitrary code execution. 3. Apply the latest patches and update to version 2021.2 or later.Exploited99% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
Top products
- Xtraction3 CVEs in the last year, 1 critical
- Sentry3 CVEs in the last year, 2 critical, 1 exploited
- Endpoint Manager Mobile (EPMM)3 CVEs in the last year, 2 critical, 3 exploited
- Secure Access Client2 CVEs in the last year
- Neurons for ITSM (On-Premise)2 CVEs in the last year
- Endpoint Manager Mobile2 CVEs in the last year
- Connect Secure2 CVEs in the last year, 1 exploited
- Virtual Traffic Manager1 CVE in the last year
- Neurons Patch for Intune1 CVE in the last year, 1 critical
- Neurons for ITSM (On-Premises)1 CVE in the last year
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
- CCCS (Canada) · Oct 16, 2026Ivanti security advisory (AV26-1035) - Update 1CVE-2026-104935CVE-2026-109412CVE-2026-111357
- Ivanti · Oct 13, 2026October 2026 Security UpdateCVE-2026-104935
- Ivanti · Sep 8, 2026September 2026 Security UpdateCVE-2026-18851CVE-2026-83527
- Ivanti · Aug 11, 2026August 2026 Security UpdateADV-ivanti-1001e5b4fb82
- Ivanti · Jul 14, 2026July 2026 Security UpdateCVE-2026-14902CVE-2026-14903
- Ivanti · Jun 9, 2026June 2026 Security UpdateCVE-2026-10520CVE-2026-10523CVE-2026-10727CVE-2026-6973
- Ivanti · Jun 1, 2026June 2026 Ivanti Neurons for ITSM Security UpdateCVE-2026-9614
- Ivanti · May 12, 2026May 2026 Security UpdateCVE-2026-7431CVE-2026-7432CVE-2026-8043CVE-2026-8051
- Ivanti · May 7, 2026May 2026 EPMM Security UpdateCVE-2026-6973
- Ivanti · Apr 14, 2026April 2026 Security UpdateCVE-2026-4913CVE-2026-4914
- Ivanti · Mar 10, 2026March 2026 Security UpdateCVE-2026-3483
- Ivanti · Feb 10, 2026February 2026 Security UpdateADV-ivanti-5340369c519e
- Ivanti · Jan 29, 2026January 2026 EPMM Security UpdateCVE-2026-1281CVE-2026-1340
- Ivanti · Dec 9, 2025December 2025 Security UpdateADV-ivanti-e8d39ac640d0
- Ivanti · Nov 11, 2025November 2025 Security UpdateADV-ivanti-e34dfea3e2e7
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.