Ivanti vulnerabilities

Products

• Connect Secure 134
• Avalanche 117
• Endpoint Manager 116
• Policy Secure 78
• Endpoint Manager 71
• Connect Secure 65
• Policy Secure 52
• Epm 33
• Endpoint Manager Mobile 29
• Workspace Control 22
• Secure Access Client 21
• Endpoint Manager Mobile 19
• Zero Trust Access Gateway 17
• Neurons For Secure Access 15
• Secure Access Client 15
• Zta Gateway 15
• Neurons For Itsm 14
• Neurons For Secure Access 13
• Epmm 11
• Workspace Control 10
• Automation 8
• Xtraction 8
• Cloud Services Appliance 7
• Endpoint Manager Mobile (epmm) 7
• Pulse Connect Secure 7
• Sentry 7
• Csa (cloud Services Appliance) 6
• Desktop \& Server Management 6
• Endpoint Manager Cloud Services Appliance 6
• Itsm 6
• Landesk Management Suite 6
• Cloud Services Application 5
• Endpoint Manager (epm) 5
• Ics 5
• Ips 5
• Neurons For Itsm 5
• Neurons For Zero-trust Access 5
• Dsm 4
• Endpoint Manager 4
• Standalone Sentry 4

Show 20 moreShow less

• Wavelink 4
• Cloud Services Appliance (csa) 3
• Incapptic Connect 3
• Neurons For Itsm 3
• Neurons For Itsm (cloud) 3
• Neurons For Zta Gateways 3
• Security Controls 3
• Application Control 2
• Connect Secure And Policy Secure 2
• Connect Secure, Policy Secure, And Zta Gateways 2
• Desktop And Server Management 2
• Mobileiron 2
• Mobileiron Core 2
• Neurons For Itsm (on-premise) 2
• Neurons For Secure 2
• Secure Access Client Windows 2
• Secure Access Linux 2
• Security Controls 2
• Virtual Traffic Manager 2
• Virtual Traffic Manager 2

Newest

• ivanti connect secure Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6... CVE-2026-118527 In KEV 4.3 MediumNovember 3, 2026
• ivanti connect secure Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache... CVE-2026-111357 In KEV 7.0 HighOctober 15, 2026
• ivanti neurons patch for intune An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated... CVE-2026-109412 9.9 CriticalOctober 13, 2026
• ivanti xtraction A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before... CVE-2026-106047 7.7 HighOctober 13, 2026
• ivanti xtraction A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version... CVE-2026-106043 7.5 HighOctober 13, 2026
• ivanti xtraction An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4... CVE-2026-106042 9.9 CriticalOctober 13, 2026
• ivanti xtraction An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before... CVE-2026-106035 5.5 MediumOctober 13, 2026
• ivanti xtraction A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote... CVE-2026-106034 5.0 MediumOctober 13, 2026
• ivanti connect secure Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated... CVE-2026-104935 In KEVPublic exploit EPSS 88.9% 8.6 HighOctober 13, 2026
• ivanti neurons for itsm A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote... CVE-2026-12647 9.9 CriticalSeptember 8, 2026
• ivanti neurons for itsm A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote... CVE-2026-12646 9.9 CriticalSeptember 8, 2026
• ivanti neurons for itsm A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote... CVE-2026-12645 9.9 CriticalSeptember 8, 2026
• ivanti sentry An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a... CVE-2026-83527 8.1 HighSeptember 8, 2026
• ivanti neurons for itsm A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows... CVE-2026-12648 8.8 HighSeptember 8, 2026
• ivanti neurons for itsm A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows... CVE-2026-12650 9.9 CriticalSeptember 8, 2026
• ivanti neurons for itsm A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows... CVE-2026-12651 8.8 HighSeptember 8, 2026
• ivanti neurons for itsm A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows... CVE-2026-12745 9.8 CriticalSeptember 8, 2026
• ivanti neurons for itsm A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows... CVE-2026-12744 9.8 CriticalSeptember 8, 2026
• ivanti endpoint manager mobile Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and... CVE-2026-18851 8.8 HighSeptember 8, 2026
• ivanti endpoint manager Cleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager before... CVE-2026-18129 8.1 HighAugust 11, 2026
• ivanti endpoint manager External control of a filename in the Core of Ivanti Endpoint Manager before version 2024 SU7... CVE-2026-18127 7.7 HighAugust 11, 2026
• ivanti endpoint manager An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a... CVE-2026-18125 7.5 HighAugust 11, 2026
• ivanti xtraction Path traversal in Ivanti  Xtraction before version 2026.2.1 allows a remote authenticated... CVE-2026-14903 7.7 HighJuly 14, 2026
• ivanti xtraction An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated... CVE-2026-14902 4.0 MediumJuly 14, 2026
• ivanti endpoint manager mobile An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2... CVE-2026-10727 EPSS 12.9% 7.2 HighJune 9, 2026
• ivanti sentry, standalone sentry +1 more An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and... CVE-2026-10523 Public exploit EPSS 54.0% 9.9 CriticalJune 9, 2026
• ivanti sentry, standalone sentry +1 more An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1... CVE-2026-10520 In KEVPublic exploit EPSS 99.9% 10.0 CriticalJune 9, 2026
• ivanti neurons for itsm (cloud), neurons for itsm (on-premises) +1 more An Improper Access Control vulnerability in Ivanti Neurons for ITSM (cloud and on-premises)... CVE-2026-9614 8.8 HighJune 1, 2026
• ivanti secure access client An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6... CVE-2026-8992 8.8 HighMay 22, 2026
• ivanti endpoint manager SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a... CVE-2026-8111 8.8 HighMay 12, 2026
• ivanti endpoint manager Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6... CVE-2026-8110 7.8 HighMay 12, 2026
• ivanti endpoint manager An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6... CVE-2026-8109 6.5 MediumMay 12, 2026
• ivanti virtual traffic manager OS command injection in Ivanti Virtual Traffic Manager before version 22.9r4 allows a remote... CVE-2026-8051 7.2 HighMay 12, 2026
• ivanti secure access client A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user... CVE-2026-7432 7.8 HighMay 12, 2026
• ivanti secure access client An incorrect permission assignment for critical resource of Ivanti Secure Access Client   before... CVE-2026-7431 4.4 MediumMay 12, 2026
• ivanti xtraction External control of a file name in Ivanti Xtraction before version 2026.2 allows a remote... CVE-2026-8043 9.6 CriticalMay 12, 2026
• ivanti endpoint manager mobile An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0... CVE-2026-5787 8.9 HighMay 7, 2026
• ivanti endpoint manager mobile An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows... CVE-2026-5788 7.0 HighMay 7, 2026
• ivanti endpoint manager mobile Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1... CVE-2026-7821 7.4 HighMay 7, 2026
• ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 more An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1... CVE-2026-6973 In KEV EPSS 34.5% 7.2 HighMay 7, 2026
• ivanti endpoint manager mobile An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and... CVE-2026-5786 EPSS 11.2% 8.8 HighMay 7, 2026
• ivanti neurons for itsm (cloud), neurons for itsm (on-premise) +1 more Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to... CVE-2026-4914 5.4 MediumApril 14, 2026
• ivanti neurons for itsm (cloud), neurons for itsm (on-premise) +1 more Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote... CVE-2026-4913 5.7 MediumApril 14, 2026
• ivanti desktop and server management, desktop \& server management +1 more An exposed dangerous method in Ivanti DSM before version 2026.1.1 allows a local authenticated... CVE-2026-3483 7.8 HighMarch 10, 2026
• ivanti endpoint manager, endpoint manager (epm) +1 more An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote... CVE-2026-1603 In KEV EPSS 88.3% 8.6 HighFebruary 10, 2026
• ivanti endpoint manager SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated... CVE-2026-1602 6.5 MediumFebruary 10, 2026
• ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 more A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated... CVE-2026-1340 In KEVPublic exploit EPSS 98.6% 9.8 CriticalJanuary 29, 2026
• ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 more A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated... CVE-2026-1281 In KEVPublic exploit EPSS 98.7% 9.8 CriticalJanuary 29, 2026
• ivanti endpoint manager Improper verification of cryptographic signatures in the patch management component of Ivanti... CVE-2025-13662 7.8 HighDecember 9, 2025
• ivanti endpoint manager Path traversal in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote... CVE-2025-13661 7.1 HighDecember 9, 2025
• Show olderLoading…