Security Digest
Ivanti: known exploited vulnerabilities
24 Ivanti CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-10-13 | CVE-2026-104935 | Ivanti Connect Secure Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability | 2026-10-16 |
| 2026-06-11 | CVE-2026-10520 | Ivanti Sentry Ivanti Sentry OS Command Injection Vulnerability | 2026-06-14 |
| 2026-05-07 | CVE-2026-6973 | Ivanti Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability | 2026-05-10 |
| 2026-04-08 | CVE-2026-1340 | Ivanti Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 2026-04-11 |
| 2026-03-09 | CVE-2026-1603 | Ivanti Endpoint Manager (EPM) Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability | 2026-03-23 |
| 2026-01-29 | CVE-2026-1281 | Ivanti Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 2026-02-01 |
| 2025-05-19 | CVE-2025-4428 | Ivanti Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 2025-06-09 |
| 2025-05-19 | CVE-2025-4427 | Ivanti Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability | 2025-06-09 |
| 2025-04-04 | CVE-2025-22457 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ransomware | 2025-04-11 |
| 2025-03-10 | CVE-2024-13161 | Ivanti Endpoint Manager (EPM) Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 2025-03-31 |
| 2025-03-10 | CVE-2024-13160 | Ivanti Endpoint Manager (EPM) Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 2025-03-31 |
| 2025-03-10 | CVE-2024-13159 | Ivanti Endpoint Manager (EPM) Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 2025-03-31 |
| 2025-01-08 | CVE-2025-0282 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ransomware | 2025-01-15 |
| 2024-10-09 | CVE-2024-9380 | Ivanti Cloud Services Appliance (CSA) Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability | 2024-10-30 |
| 2024-10-09 | CVE-2024-9379 | Ivanti Cloud Services Appliance (CSA) Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability | 2024-10-30 |
| 2024-10-02 | CVE-2024-29824 | Ivanti Endpoint Manager (EPM) Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability | 2024-10-23 |
| 2024-09-24 | CVE-2024-7593 | Ivanti Virtual Traffic Manager Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability | 2024-10-15 |
| 2024-09-19 | CVE-2024-8963 | Ivanti Cloud Services Appliance (CSA) Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability | 2024-10-10 |
| 2024-09-13 | CVE-2024-8190 | Ivanti Cloud Services Appliance Ivanti Cloud Services Appliance OS Command Injection Vulnerability | 2024-10-04 |
| 2024-03-25 | CVE-2021-44529 | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Ransomware | 2024-04-15 |
| 2024-01-31 | CVE-2024-21893 | Ivanti Connect Secure, Policy Secure, and Neurons Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability Ransomware | 2024-02-02 |
| 2024-01-18 | CVE-2023-35082 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability Ransomware | 2024-02-08 |
| 2024-01-10 | CVE-2024-21887 | Ivanti Connect Secure and Policy Secure Ivanti Connect Secure and Policy Secure Command Injection Vulnerability Ransomware | 2024-01-22 |
| 2024-01-10 | CVE-2023-46805 | Ivanti Connect Secure and Policy Secure Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability Ransomware | 2024-01-22 |