CyberSIXT Search
Vendor

Ivanti

CVEs tracked · all time
36
in CISA KEV · all time
9
articles · since 11 Sep
18
articles · all time
70

18 articles since 11 Sep; 1 CISA notice, marked below the bars.

Show as table
Ivanti: articles per day
Day (UTC)Articles
Mon 5 Oct1
Thu 8 Oct1
Tue 13 Oct8
Wed 14 Oct7
Fri 16 Oct1
See the full timeline
Products: Endpoint Manager (EPM), Connect Secure, Connect Secure and Policy Secure, Endpoint Manager and 12 more
Endpoint Manager (EPM)Connect SecureConnect Secure and Policy SecureEndpoint ManagerEndpoint Manager MobileEndpoint Manager Mobile (EPMM)ICSIPSIvanti Neurons for ITSMNeurons for ITSMNeurons for ITSM (Cloud)Neurons for ITSM (On-Premise)Neurons for ITSM (On-Premises)Neurons Patch for IntuneSentryXtraction

CVEs

36 CVEs
CVE-2026-104935Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityCVSS8.6HighExploited87%EPSS15articles
CVE-2019-11510Ivanti Pulse Connect Secure Arbitrary File Read VulnerabilityCVSS9.9CriticalExploited99.9%EPSS1article
CVE-2024-21887Ivanti Connect Secure and Policy Secure Command Injection VulnerabilityCVSS9.1CriticalExploited99.9%EPSS1article
CVE-2023-46805Ivanti Connect Secure and Policy Secure Authentication Bypass VulnerabilityCVSS8.2HighExploited99.9%EPSS2articles
CVE-2026-10520Ivanti Sentry OS Command Injection VulnerabilityCVSS10.0CriticalExploited99.9%EPSS13articles
CVE-2026-6973Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation VulnerabilityCVSS7.2HighExploited34%EPSS7articles
CVE-2026-1281Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityCVSS9.8CriticalExploited99%EPSS13articles
CVE-2026-1340Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityCVSS9.8CriticalExploited99%EPSS15articles
CVE-2026-1603Ivanti Endpoint Manager (EPM) Authentication Bypass VulnerabilityCVSS8.6HighExploited88%EPSS8articles
CVE-2026-106042Ivanti Xtraction vulnerabilityCVSS9.9Critical–Not in KEV0.8%EPSS2articles
CVE-2026-109412Ivanti Neurons Patch for Intune vulnerabilityCVSS9.9Critical–Not in KEV0.9%EPSS2articles
CVE-2026-106047Ivanti Xtraction vulnerabilityCVSS7.7High–Not in KEV0.7%EPSS1article
24 more CVEs
CVE-2026-106043Ivanti Xtraction vulnerabilityCVSS7.5High–Not in KEV0.7%EPSS1article
CVE-2026-106035Ivanti Xtraction vulnerabilityCVSS5.5Medium–Not in KEV0.3%EPSS1article
CVE-2026-106034Ivanti Xtraction vulnerabilityCVSS5.0Medium–Not in KEV0.5%EPSS1article
CVE-2026-12650Ivanti Neurons for ITSM vulnerabilityCVSS9.9Critical–Not in KEV1.6%EPSS2articles
CVE-2026-12646Ivanti Neurons for ITSM vulnerabilityCVSS9.9Critical–Not in KEV1.2%EPSS1article
CVE-2026-12645Ivanti Neurons for ITSM vulnerabilityCVSS9.9Critical–Not in KEV1.5%EPSS1article
CVE-2026-12647Ivanti Neurons for ITSM vulnerabilityCVSS9.9Critical–Not in KEV1.5%EPSS1article
CVE-2026-12745Ivanti Neurons for ITSM vulnerabilityCVSS9.8Critical–Not in KEV2.2%EPSS2articles
CVE-2026-12744Ivanti Neurons for ITSM vulnerabilityCVSS9.8Critical–Not in KEV2.3%EPSS2articles
CVE-2026-18851Ivanti Endpoint Manager Mobile vulnerabilityCVSS8.8High–Not in KEV1.2%EPSS1article
CVE-2026-83527Ivanti Sentry vulnerabilityCVSS8.1High–Not in KEV1.8%EPSS1article
CVE-2026-18129Ivanti Endpoint Manager vulnerabilityCVSS8.1High–Not in KEV1.5%EPSS1article
CVE-2026-18127Ivanti Endpoint Manager vulnerabilityCVSS7.7High–Not in KEV0.7%EPSS1article
CVE-2026-18125Ivanti Endpoint Manager vulnerabilityCVSS7.5High–Not in KEV1.6%EPSS1article
CVE-2026-14903ivanti Xtraction vulnerabilityCVSS7.7High–Not in KEV1.2%EPSS1article
CVE-2026-14902ivanti Xtraction vulnerabilityCVSS4.0Medium–Not in KEV0.7%EPSS1article
CVE-2026-10523ivanti Sentry vulnerabilityCVSS9.9Critical–Not in KEV53%EPSS2articles
CVE-2026-9614Ivanti Neurons for ITSM (On-Premises) vulnerabilityCVSS8.8High–Not in KEV1.4%EPSS1article
CVE-2026-8043ivanti Xtraction vulnerabilityCVSS9.6Critical–Not in KEV0.9%EPSS2articles
CVE-2026-5787Ivanti Endpoint Manager Mobile vulnerabilityCVSS8.9High–Not in KEV0.8%EPSS1article
CVE-2026-5786Ivanti Endpoint Manager Mobile vulnerabilityCVSS8.8High–Not in KEV1.2%EPSS1article
CVE-2026-5788Ivanti Endpoint Manager Mobile vulnerabilityCVSS7.0High–Not in KEV1.5%EPSS1article
CVE-2026-4913Ivanti Neurons for ITSM (On-Premise) vulnerabilityCVSS5.7Medium–Not in KEV0.6%EPSS1article
CVE-2026-4914Ivanti Neurons for ITSM (On-Premise) vulnerabilityCVSS5.4Medium–Not in KEV0.6%EPSS1article

Coverage

70 articles, all timeFull timeline RSS feed
  1. China-linked hackers exploited BeyondTrust zero-day to steal credentialsDark Reading
  2. Ivanti VPN Zero Days Let Attackers Gain Root Access, Even When PatchedDark Reading
  3. CISA Flags Actively Exploited Windows Flaw That Bypasses Security ProtectionsSecurity Affairs
  4. CISA Urges Ivanti Users to Patch Zero Day Behind Data Theft AttacksThe Hacker News
  5. Microsoft Ends Windows 11 24H2 Support for Consumers in October 2026SecurityOnline
  6. Ivanti VPN Zero Days Let Hackers Gain Stealthy Root AccessSecurity Affairs
  7. Broadcom Moves VMware to Monthly Security Updates as AI Speeds Flaw DiscoverySecurityOnline
  8. Citrix, Fortinet and Ivanti Patch Critical Flaws, Exploited Zero DaySecurityWeek
  9. Ivanti VPN Zero Day Enables Remote Attacks Before Patches ArriveRapid7
  10. Attackers Chain Three Zero Days to Gain Root Access to Ivanti VPNsSecurityOnline
  11. Ivanti VPN Zero Days Let Hackers Gain Root Access Without Logging InThe Hacker News
  12. Ivanti Patches VPN Zero Days After Attackers Steal Domain CredentialsSecurityWeek
  13. CISA Flags Ivanti VPN Flaw Enabling Unauthenticated Command ExecutionSecurity Affairs
  14. Ivanti Connect Secure flaw bypasses authentication in active attacksSecurityOnline
  15. Ivanti flaws expose Intune and Xtraction credentials, prompting secret rotationSecurityOnline
  16. CISA Warns Ivanti VPN Flaw Enables Unauthenticated Command ExecutionCISA · official notice
  17. China-Based Hackers Accused of Stealing Emails Across 7 CountriesThe Hacker News
  18. ClingSTUN Turns Unpatched IoT Devices Into Covert Proxy NodesInfosecurity
  19. Ivanti Patches Critical Flaws Enabling Remote Code ExecutionSecurityWeek
  20. Ivanti ITSM Flaws Expose On-Premise Systems to Remote Code ExecutionSecurityOnline
  21. Ivanti Patches Flaws That Could Grant Attackers Admin AccessSecurityOnline
  22. Ivanti patches critical EPM flaws, including cleartext data leakSecurityWeek
  23. Ivanti Deploys AI to Uncover Hidden Flaws Like CVE-2026-10520Dark Reading
  24. Fortinet, Ivanti and ServiceNow patch unauth RCE and other flawsSecurityWeek
  25. CISA warns of active exploits in Ivanti, Cisco, Oracle and ChromeSecurityOnline
  26. CISA urges immediate patch for Ivanti Sentry CVE-2026-10520 flawSecurity Affairs
  27. Ivanti Sentry Exploitation Attempts Hitting HoneypotsSecurityWeek
  28. Spring Framework Patches Critical Flaws, Urges Immediate UpgradeSecurityOnline
  29. CISA Adds Ivanti Sentry Command Injection Flaw to KEV CatalogueCISA · official notice
  30. CISA warns of Ivanti Sentry flaw granting remote root accessCISA · official notice
  31. Critical Ivanti Sentry flaw exploited 24 hours after disclosureDark Reading
  32. Ivanti Sentry gateways compromised by CVE-2026-10520 injection bugSecurity Affairs
  33. CVE-2026-10520 lets hackers run root on Ivanti SentrySOCRadar
  34. CVE-2026-10520, CVE-2026-10523 - Multiple critical vulnerabilities affecting Ivanti SentryRapid7
  35. Critical Vulnerabilities Patched in Fortinet, Ivanti ProductsSecurityWeek
  36. Ivanti patches CVE-2026-10520 gateway flaw after urgent alertSecurityOnline
  37. High-Severity Ivanti ITSM Vulnerability Exposes IT SystemsSecurityOnline
  38. Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation FlawsThe Hacker News
  39. Fortinet and Ivanti patch 18 flaws, including three critical bugsSecurityWeek
  40. Ivanti EPMM and PAN OS flaws hit as patches roll out mid MayThe Hacker News
  41. CVE‑2026‑6973 Exploited in Wild, Urges Patch of Ivanti EPMMSOCRadar
  42. Ivanti patches EPMM zero day CVE-2026-6973 after targeted attacksSecurityWeek
  43. Ivanti EPMM flaw CVE-2026-6973 lets admins execute code remotelyCISA · official notice
  44. CISA flags Ivanti EPMM flaw CVE-2026-6973 as actively exploitedCISA · official notice
  45. Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation Grants Admin-Level AccessThe Hacker News
  46. CISA flags Ivanti EPMM zero day CVE‑2026‑6973, urges May 10 patchSecurity Affairs
  47. Ivanti fixes two medium severity flaws in Neurons for ITSMSecurityWeek
  48. CISA adds critical Ivanti EPMM flaw to KEV after PoC releaseSecurity Affairs
  49. CISA Flags CVE-2026-1340 in Ivanti EPMM, Orders Rapid PatchCISA · official notice
  50. CISA warns of Ivanti EPMM flaw enabling remote code executionCISA · official notice

The latest 50 are listed. Every article is in the RSS feed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device