Ivanti — security advisories

43 advisories38 exploitedlatest 2026-06-11⚡ RSS feed

Tracked Ivanti products:

Sentry Endpoint Manager Mobile (EPMM)Endpoint Manager Mobile Endpoint Manager (EPM)Connect Secure, Policy Secure, and ZTA Gateways Connect Secure, Policy Secure, Neurons for Zero Trust Access Connect Secure Cloud Services Appliance (CSA)Virtual Traffic Manager Cloud Services Appliance Endpoint Manager Cloud Service Appliance (EPM CSA)Connect Secure, Policy Secure, Neurons Endpoint Manager Mobile (EPMM) and MobileIron Core Connect Secure and Policy Secure Pulse Connect Secure Collaboration Suite Pulse Connect Secure MobileIron EPMM Ivanti products

⚡ Watch Ivanti

Get an email when a new Ivanti advisory drops — max one per day, one-click unsubscribe.

CVE-2026-10520: Ivanti Sentry OS Command Injection Vulnerability

criticalexploitedCVE-2026-10520cisa-kev2026-06-11

2026-008: Critical vulnerabilities in Ivanti Sentry

criticalCVE-2026-10520 CVE-2026-10523cert-eu2026-06-10

CVE-2026-6973: Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability

criticalexploitedCVE-2026-6973cisa-kev2026-05-07

CVE-2026-1340: Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

criticalexploitedCVE-2026-1340cisa-kev2026-04-08

CVE-2026-1603: Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

criticalexploitedCVE-2026-1603cisa-kev2026-03-09

2026-001: Critical vulnerabilities in Ivanti EPMM

criticalCVE-2026-1281 CVE-2026-1340cert-eu2026-01-30

[Update] Multiple vulnerabilities in Ivanti Endpoint Manager Mobile (January 30, 2026)

unknownCVE-2026-1340 CVE-2026-1281cert-fr-alerte2026-01-30

CVE-2026-1281: Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

criticalexploitedCVE-2026-1281cisa-kev2026-01-29

CVE-2025-4427: Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability

criticalexploitedCVE-2025-4427cisa-kev2025-05-19

CVE-2025-4428: Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

criticalexploitedCVE-2025-4428cisa-kev2025-05-19

Multiple vulnerabilities in Ivanti Endpoint Manager Mobile (EPMM) (May 14, 2025)

unknownexploitedCVE-2025-4427 CVE-2025-4428cert-fr-alerte2025-05-14

CVE-2025-22457: Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

criticalexploitedCVE-2025-22457cisa-kev2025-04-04

[Update] Vulnerability in Ivanti products (April 3, 2025)

unknownCVE-2025-22457 CVE-2025-0282cert-fr-alerte2025-04-03

CVE-2024-13159: Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

criticalexploitedCVE-2024-13159cisa-kev2025-03-10

CVE-2024-13160: Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

criticalexploitedCVE-2024-13160cisa-kev2025-03-10

CVE-2024-13161: Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

criticalexploitedCVE-2024-13161cisa-kev2025-03-10

[Update] Vulnerability in Ivanti products (January 9, 2025)

unknownexploitedCVE-2025-0282cert-fr-alerte2025-01-09

CVE-2025-0282: Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

criticalexploitedCVE-2025-0282cisa-kev2025-01-08

Exploitation of vulnerabilities in Ivanti Cloud Services Appliance (CSA) (October 22, 2024)

unknownexploitedCVE-2024-8190cert-fr-alerte2024-10-22

CVE-2024-9379: Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability

criticalexploitedCVE-2024-9379cisa-kev2024-10-09

CVE-2024-9380: Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability

criticalexploitedCVE-2024-9380cisa-kev2024-10-09

CVE-2024-29824: Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability

criticalexploitedCVE-2024-29824cisa-kev2024-10-02

CVE-2024-7593: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability

criticalexploitedCVE-2024-7593cisa-kev2024-09-24

CVE-2024-8963: Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability

criticalexploitedCVE-2024-8963cisa-kev2024-09-19

CVE-2024-8190: Ivanti Cloud Services Appliance OS Command Injection Vulnerability

criticalexploitedCVE-2024-8190cisa-kev2024-09-13

CVE-2021-44529: Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability

criticalexploitedCVE-2021-44529cisa-kev2024-03-25

CVE-2024-21893: Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability

criticalexploitedCVE-2024-21893cisa-kev2024-01-31

CVE-2023-35082: Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability

criticalexploitedCVE-2023-35082cisa-kev2024-01-18

[Update] Multiple vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways (January 11, 2024)

unknownCVE-2024-21888 CVE-2024-21893 CVE-2023-46805 CVE-2024-21887cert-fr-alerte2024-01-11

CVE-2024-21887: Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

criticalexploitedCVE-2024-21887cisa-kev2024-01-10

CVE-2023-46805: Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability

criticalexploitedCVE-2023-46805cisa-kev2024-01-10

CVE-2023-38035: Ivanti Sentry Authentication Bypass Vulnerability

criticalexploitedCVE-2023-38035cisa-kev2023-08-22

CVE-2023-35081: Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability

criticalexploitedCVE-2023-35081cisa-kev2023-07-31

CVE-2023-35078: Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability

criticalexploitedCVE-2023-35078cisa-kev2023-07-25

CVE-2019-11539: Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability

criticalexploitedCVE-2019-11539cisa-kev2021-11-03

CVE-2020-8260: Ivanti Pulse Connect Secure Code Execution Vulnerability

criticalexploitedCVE-2020-8260cisa-kev2021-11-03

CVE-2021-22893: Ivanti Pulse Connect Secure Use-After-Free Vulnerability

criticalexploitedCVE-2021-22893cisa-kev2021-11-03

CVE-2021-22899: Ivanti Pulse Connect Secure Command Injection Vulnerability

criticalexploitedCVE-2021-22899cisa-kev2021-11-03

CVE-2020-8243: Ivanti Pulse Connect Secure Code Execution Vulnerability

criticalexploitedCVE-2020-8243cisa-kev2021-11-03

CVE-2021-22900: Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability

criticalexploitedCVE-2021-22900cisa-kev2021-11-03

CVE-2021-22894: Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability

criticalexploitedCVE-2021-22894cisa-kev2021-11-03

CVE-2019-11510: Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability

criticalexploitedCVE-2019-11510cisa-kev2021-11-03

CVE-2020-15505: Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability

criticalexploitedCVE-2020-15505cisa-kev2021-11-03